Homebrew Formulae: theharvester

theharvester

Install command:

brew install theharvester

Gather materials from public sources (for pen testers)

License: GPL-2.0-only

Formula code: theharvester.rb on GitHub

Bottle (binary package) installation support provided for:

Current versions:

stable	✅	4.11.1
head	⚡️	HEAD

Revision: 1

Depends on:

certifi	2026.7.22	Mozilla CA bundle for Python
cffi	2.1.1	C Foreign Function Interface for Python
libyaml	0.2.5	YAML Parser
pydantic	2.13.4	Data validation using Python type hints
python@3.14	3.14.7	Interpreted, interactive, object-oriented programming language

Depends on when building from source:

4.4.2

Cross-platform make

Known vulnerabilities in the current version:

GHSA-4fvr-rgm6-gqmc	aiohttp: HTTP/1 Pipelined Requests Queue Without Limit
GHSA-xcgm-r5h9-7989	aiohttp: Incomplete websocket frame payloads bypass memory limits
GHSA-4m7w-qmgq-4wj5	aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections
GHSA-hpj7-wq8m-9hgp	aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges
GHSA-63hw-fmq6-xxg2	aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines
GHSA-g3cq-j2xw-wf74	aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup
GHSA-2fqr-mr3j-6wp8	aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence
GHSA-9x8q-7h8h-wcw9	aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect
GHSA-3j69-69wj-xqx2 (medium)	UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()
GHSA-mq44-7p77-q5h7	AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate
GHSA-mfx4-hv73-q22v	AIOHTTP: HTTP request smuggling via WebSocket upgrade
GHSA-cq5v-8q36-5273	AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

Data from Homebrew/advisory-database. Run brew vulns theharvester for a live check.

Analytics: