CVE-2023-43364

Description

main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution.

How to fix CVE-2023-43364

To remediate CVE-2023-43364, upgrade the affected package to a fixed version below.

• PyPI/searchor—upgrade to 2.4.2 or later
• PyPI/searchor—upgrade to 16016506f7bf92b0f21f51841d599126d6fcd15b or later

Is CVE-2023-43364 being exploited?

Moderate — EPSS is 29.6%. Track this CVE but it's not at the top of the prioritisation list.

Affected packages (2)

• from 0, < 2.4.2
• from 0, < 16016506f7bf92b0f21f51841d599126d6fcd15b | from 0, < 2.4.2

CVSS scores

References (9)

• ADVISORYgithub.com/advisories/GHSA-66m2-493m-crh2
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2023-43364
• PATCHgithub.com/ArjunSharda/Searchor
• WEBgithub.com/ArjunSharda/Searchor/commit/16016506f7bf92b0f21f51841d599126d6fcd15b
• WEB