CVE-2023-0247: Bloom Project Bloom

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1.

Affected products

• Bloom Project Bloom: before 3.3.1 (fixed in 3.3.1)

Published 2023-01-12. Last modified 2026-06-17.