CVE-2025-65720Critical· 9.8▾ MidnightAn issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 2.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.9%
Last analysed / modified upstream
An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
gpt-researcher >= 0.14.5, <= 0.14.7Connected by shared product, vendor, weakness, or advisory.
CVE-2024-10190Critical· 9.8Horovod Vulnerable to Command Injection
CVE-2024-5023Critical· 9.6ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command
CVE-2022-46421Critical· 9.8Apache Airflow Hive Provider vulnerable to Command Injection
CVE-2023-22884Critical· 9.8Command Injection in Apache Airflow and Apache Airflow MySQL Provider
CVE-2025-14648Medium· 4.7A security vulnerability has been detected in DedeBIZ up to 6.5.9
CVE-2025-59831High· 8.8git-commiters is a Node.js function module providing committers stats for their git repository