CVE-2021-34083: Google-It Project Google-It

High severity, CVSS 8.1. EPSS: 2.1% chance of exploitation in the next 30 days.

Google-it is a Node.js package which allows its users to send search queries to Google and receive the results in a JSON format. When using the 'Open in browser' option in versions up to 1.6.2, google-it will unsafely concat the result's link retrieved from google to a shell command, potentially exposing the server to RCE.

Affected products

• Google-It Project Google-It: up to and including 1.6.2

Published 2022-06-02. Last modified 2026-06-17.