Advisories · Technology
unclecode crawl4ai.
Every CVE that names unclecode crawl4ai among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Crawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness Check
- unclecode crawl4ai
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_for
- unclecode crawl4ai
- Code injection
- CVSS 7.7 High
Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_name
- unclecode crawl4ai
- Insecure deserialization
- CVSS 8.7 High
Crawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay Fields
- unclecode crawl4ai
- Denial of service
- CVSS 8.3 High
Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flags
- unclecode crawl4ai
- Weak cryptography or TLS
- CVSS 7.1 High
Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields
- unclecode crawl4ai
- Denial of service
- CVSS 6.9 Medium
Crawl4AI 0.8.7 through 0.9.5 SSRF Bypass via SSLCertificate.from_url URL Userinfo
- unclecode crawl4ai
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
Crawl4AI before 0.9.4 Blind SSRF via RobotsParser.can_fetch robots.txt Fetch
- unclecode crawl4ai
- Server-side request forgery (SSRF)
- CVSS 9.2 CriticalCritical · CVSS 9+
Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seeder
- unclecode crawl4ai
- Server-side request forgery (SSRF)
- CVSS 8.6 High
Crawl4AI 0.9.0 before 0.9.4 Untrusted Config Gate Bypass Leaks Environment Variables
- unclecode crawl4ai
- Insecure deserialization
- CVSS 5.1 Medium
crawl4ai before 0.9.3 DOM-based XSS via Playground UI
- unclecode crawl4ai
- Cross-site scripting (XSS)
- CVSS 8.3 High
Crawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategy
- unclecode crawl4ai
- Server-side request forgery (SSRF)
- CVSS 5.1 Medium
crawl4ai before 0.9.3 Cross-Site Scripting via innerHTML
- unclecode crawl4ai
- Cross-site scripting (XSS)
- CVSS 8.7 High
Crawl4AI before 0.9.3 Denial of Service via PDFContentScrapingStrategy
- unclecode crawl4ai
- Denial of service
- CVSS 8.7 High
crawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategy
- unclecode crawl4ai
- Path traversal