Crawl4ai vulnerabilities
Products
- Crawl4ai 9
Newest
- crawl4ai Crawl4AI - Arbitrary File Write via output_path Symlink and TOCTOU 9.2 Critical
- crawl4ai Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Resolution 8.8 High
- crawl4ai Crawl4AI - Server-Side Request Forgery via Direct Crawl Endpoints 9.2 Critical
- crawl4ai Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key 9.3 Critical
- crawl4ai Crawl4AI - Arbitrary JavaScript Execution via /execute_js Endpoint 9.2 Critical
- crawl4ai Crawl4AI - Stored Cross-Site Scripting in Monitor Dashboard 5.3 Medium
- crawl4ai Crawl4AI - Unauthenticated Access to Monitor Endpoints via Docker API Server 6.9 Medium
- crawl4ai Crawl4AI - Server-Side Request Forgery via Webhook URLs 9.2 Critical
- crawl4ai Crawl4AI - Arbitrary File Write via output_path Parameter 8.8 High