Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-91944
  • github.com/unclecode/crawl4ai
 crawl4ai before 0.9.3 DOM-based XSS via Playground UI 15 Sep
  • Fix available
  • Severity - 5.1 (Medium)
CVE-2026-91943
  • github.com/unclecode/crawl4ai
 Crawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategy 15 Sep
  • Fix available
  • Severity - 8.3 (High)
CVE-2026-91942
  • github.com/unclecode/crawl4ai
 crawl4ai before 0.9.3 Cross-Site Scripting via innerHTML 15 Sep
  • Fix available
  • Severity - 5.1 (Medium)
CVE-2026-91941
  • github.com/unclecode/crawl4ai
 Crawl4AI before 0.9.3 Denial of Service via PDFContentScrapingStrategy 15 Sep
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-91940
  • github.com/unclecode/crawl4ai
 crawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategy 15 Sep
  • Fix available
  • Severity - 8.7 (High)
PYSEC-2026-3449
  • PyPI/crawl4ai
 See record for full details 12 Jul
  • Fix available
  • Severity - 8.8 (High)
PYSEC-2026-3448
  • PyPI/crawl4ai
 See record for full details 12 Jul
  • Fix available
  • Severity - 8.8 (High)
CVE-2026-56260
  • github.com/unclecode/crawl4ai
 Crawl4AI - Arbitrary File Write via output_path Parameter 12 Jul
  • Fix available
  • Severity - 8.8 (High)
CVE-2026-56259
  • github.com/unclecode/crawl4ai
 Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Resolution 12 Jul
  • Fix available
  • Severity - 8.8 (High)
PYSEC-2026-3443
  • PyPI/crawl4ai
 See record for full details 10 Jul
  • Fix available
  • Severity - 7.5 (High)
CVE-2026-56261
  • github.com/unclecode/crawl4ai
 Crawl4AI - Server-Side Request Forgery via Webhook URLs 10 Jul
  • Fix available
  • Severity - 9.2 (Critical)
PYSEC-2026-1281
  • PyPI/crawl4ai
 Crawl4AI SSRF vulnerability 07 Jul
  • No fix available
  • Severity - 6.9 (Medium)
PYSEC-2026-2140
  • PyPI/crawl4ai
 See record for full details 06 Jul
  • Fix available
  • Severity - 8.6 (High)
PYSEC-2026-2139
  • PyPI/crawl4ai
 See record for full details 06 Jul
  • Fix available
  • Severity - 10.0 (Critical)
PYSEC-2026-2138
  • PyPI/crawl4ai
 See record for full details 06 Jul
  • Fix available
  • Severity - 9.6 (Critical)
CVE-2026-57572
  • github.com/unclecode/crawl4ai
 Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args 06 Jul
  • Fix available
  • Severity - 10.0 (Critical)
Load more...