Description
An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | gpt-researcher | >= 0.14.5, <= 0.14.7 | — | GHSA-8j86-h8gg-797p |