CR
Product
crawl4ai
23
CVEs
0
On KEV
10.0
Max CVSS
10
New 30D
Severity mix
Critical 4High 11Medium 8Low 0
Watch
Add crawl4ai to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-119118 New | 6.5 | Oct 29 | Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flags Affected: before 0.9.5 |
| CVE-2026-115508 | 6.5 | Oct 22 | Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields Affected: 0.7.0 before 0.9.5 |
| CVE-2026-91944 | 6.1 | Sep 15 | crawl4ai before 0.9.3 DOM-based XSS via Playground UI Affected: before 0.9.3 |
| CVE-2026-91942 | 5.4 | Sep 15 | crawl4ai before 0.9.3 Cross-Site Scripting via innerHTML Affected: before 0.9.3 |
| CVE-2026-119122 New | 5.3 | Oct 29 | Crawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness Check Affected: before 0.9.5 |
| CVE-2026-112363 | 5.3 | Oct 19 | Crawl4AI 0.8.7 through 0.9.5 SSRF Bypass via SSLCertificate.from_url URL Userinfo Affected: 0.8.7 through 0.9.5 |
| CVE-2026-109239 | 5.3 | Oct 12 | Crawl4AI before 0.9.4 Blind SSRF via RobotsParser.can_fetch robots.txt Fetch Affected: before 0.9.4 |
| CVE-2026-119121 New | 4.3 | Oct 29 | Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_for Affected: 0.9.0 before 0.9.5 |
Showing 8