maurosoria/dirsearch

Releases20

Frequency7 months 1 week

Last Release 4 months ago

Stars14.3K

Web path scanner

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2021-47901 ↗	Jan 27, 2026Tuesday, 27 January 2026, 16:16	9.8 CRITICAL	—
Dirsearch 0.4.1 contains a CSV injection vulnerability when using the --csv-report flag that allows attackers to inject formulas through redirected endpoints. Attackers can craft malicious server redirects with comma-separated paths containing Excel formulas to manipulate the generated CSV report.