CVE-2026-50870

The software Ben Busby whoogle-search v1.2.3 contains an information disclosure vulnerability within its configuration endpoint. An unauthenticated attacker can obtain sensitive information by sending a crafted GET request to this endpoint. At this time, there is no information regarding a newer ...

EUVD-2024-0189

Malicious code in bioql PyPI...

CVE-2024-53305

An issue in the component /models/config.py of Whoogle search v0.9.0 allows attackers to execute arbitrary code via supplying a crafted search query...

CVE-2024-22417 Whoogle Search Cross-site Scripting vulnerability

Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the element method in app/routes.py does not validate the user-controlled srctype and elementurl variables and passes them to the send method which sends a GET request on lines 339-343 in requests.py. The returned...