Vulnerabilities

TI-2024-35761 CVE-2024-53305 · GHSA-2689-cw26-6cpj

An issue in the component /models/config.py of Whoogle search v0.9.0 allows attackers to…

MEDIUM 41

An issue in the component /models/config.py of Whoogle search v0.9.0 allows attackers to execute arbitrary code via supplying a crafted search query.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00594 Published 2025-04-16 Fixed in 0.9.1 CWE-77

TI-2024-14990 CVE-2024-22417 · GHSA-phg6-44m7-hx3h

HIGH 66

Whoogle Search is a self-hosted metasearch engine.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0063 Published 2024-01-23 Fixed in 0.8.4 CWE-79

TI-2024-14798 CVE-2024-22205 · GHSA-3q6g-qmpx-rqw4

MEDIUM 50

Whoogle Search is a self-hosted metasearch engine.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0098 Published 2024-01-23 Fixed in 0.8.4 CWE-918

TI-2024-14797 CVE-2024-22204 · GHSA-hh2q-qv66-jcqg

MEDIUM 57

Whoogle Search is a self-hosted metasearch engine.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00751 Published 2024-01-23 Fixed in 0.8.4 CWE-22

TI-2024-14796 CVE-2024-22203 · GHSA-q97g-c29h-x2p7

HIGH 82

Whoogle Search is a self-hosted metasearch engine.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01003 Published 2024-01-23 Fixed in 0.8.4 CWE-918