High · 7.3 CVE-2024-53305 EUVD-2024-54416GHSA-2689-cw26-6cpjPYSEC-2026-2048

Whoogle allows attackers to execute arbitrary code via supplying a crafted search query

Published Apr 16, 2025 · Updated Apr 16, 2025 · Assigned by mitre

Description

An issue in the component /models/config.py of Whoogle search v0.9.0 allows attackers to execute arbitrary code via supplying a crafted search query.

Ecosystem	Package	Affected	Fixed	Record
PyPI	whoogle-search	< 0.9.1	0.9.1	GHSA-2689-cw26-6cpj