{"items":[{"id":"CVE-2026-119122","published":"2026-10-29T15:58:05.930Z","updated":"2026-10-29T20:16:29.709Z","title":"Crawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness Check","severity":"MEDIUM","score":6.9,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.0037,"kevAdded":null},{"id":"CVE-2026-119121","published":"2026-10-29T15:58:05.117Z","updated":"2026-10-29T17:15:06.009Z","title":"Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_for","severity":"MEDIUM","score":5.3,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00286,"kevAdded":null},{"id":"CVE-2026-119120","published":"2026-10-29T15:58:04.414Z","updated":"2026-11-03T15:39:40.300Z","title":"Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_name","severity":"HIGH","score":7.7,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2026-119119","published":"2026-10-29T15:58:03.704Z","updated":"2026-11-04T01:23:51.754Z","title":"Crawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay Fields","severity":"HIGH","score":8.7,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00359,"kevAdded":null},{"id":"CVE-2026-119118","published":"2026-10-29T15:58:02.951Z","updated":"2026-10-29T20:12:21.033Z","title":"Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flags","severity":"HIGH","score":8.3,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00186,"kevAdded":null},{"id":"CVE-2026-115508","published":"2026-10-22T19:14:07.893Z","updated":"2026-10-29T02:36:22.691Z","title":"Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields","severity":"HIGH","score":7.1,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00459,"kevAdded":null},{"id":"CVE-2026-112363","published":"2026-10-19T15:28:59.792Z","updated":"2026-10-19T16:33:37.088Z","title":"Crawl4AI 0.8.7 through 0.9.5 SSRF Bypass via SSLCertificate.from_url URL Userinfo","severity":"MEDIUM","score":6.9,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2026-109239","published":"2026-10-12T16:04:16.402Z","updated":"2026-10-13T16:57:08.639Z","title":"Crawl4AI before 0.9.4 Blind SSRF via RobotsParser.can_fetch robots.txt Fetch","severity":"MEDIUM","score":6.9,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00265,"kevAdded":null},{"id":"CVE-2026-109238","published":"2026-10-12T16:04:15.750Z","updated":"2026-10-13T15:25:59.791Z","title":"Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seeder","severity":"CRITICAL","score":9.2,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00298,"kevAdded":null},{"id":"CVE-2026-109237","published":"2026-10-12T16:04:15.000Z","updated":"2026-10-15T02:27:16.063Z","title":"Crawl4AI 0.9.0 before 0.9.4 Untrusted Config Gate Bypass Leaks Environment Variables","severity":"HIGH","score":8.6,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00324,"kevAdded":null},{"id":"CVE-2026-91944","published":"2026-09-15T15:18:03.786Z","updated":"2026-09-17T19:28:40.421Z","title":"crawl4ai before 0.9.3 DOM-based XSS via Playground UI","severity":"MEDIUM","score":5.1,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00263,"kevAdded":null},{"id":"CVE-2026-91943","published":"2026-09-15T15:18:03.108Z","updated":"2026-09-15T16:04:28.656Z","title":"Crawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategy","severity":"HIGH","score":8.3,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00354,"kevAdded":null},{"id":"CVE-2026-91942","published":"2026-09-15T15:18:02.423Z","updated":"2026-09-17T14:51:56.078Z","title":"crawl4ai before 0.9.3 Cross-Site Scripting via innerHTML","severity":"MEDIUM","score":5.1,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00237,"kevAdded":null},{"id":"CVE-2026-91941","published":"2026-09-15T15:18:01.763Z","updated":"2026-09-20T00:35:29.818Z","title":"Crawl4AI before 0.9.3 Denial of Service via PDFContentScrapingStrategy","severity":"HIGH","score":8.7,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00488,"kevAdded":null},{"id":"CVE-2026-91940","published":"2026-09-15T15:18:01.074Z","updated":"2026-09-15T15:47:15.999Z","title":"crawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategy","severity":"HIGH","score":8.7,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.0046,"kevAdded":null},{"id":"CVE-2026-57572","published":"2026-07-06T20:16:21.597Z","updated":"2026-07-08T19:42:13.954Z","title":"Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args","severity":"CRITICAL","score":10,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00939,"kevAdded":null},{"id":"CVE-2026-57573","published":"2026-07-06T20:11:15.691Z","updated":"2026-07-07T14:16:25.619Z","title":"Crawl4AI unauthenticated SSRF in Docker streaming crawl endpoint","severity":"HIGH","score":8.6,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00445,"kevAdded":null},{"id":"CVE-2026-57571","published":"2026-07-06T20:09:52.251Z","updated":"2026-07-07T14:53:40.859Z","title":"Crawl4AI arbitrary file write via download filename path traversal","severity":"CRITICAL","score":9.6,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00809,"kevAdded":null},{"id":"CVE-2026-53753","published":"2026-06-23T18:17:18.936Z","updated":"2026-06-23T18:55:22.278Z","title":"Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API","severity":"CRITICAL","score":9.8,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.029,"kevAdded":null},{"id":"CVE-2026-53754","published":"2026-06-23T18:16:34.260Z","updated":"2026-06-23T18:54:14.891Z","title":"Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)","severity":"HIGH","score":7.5,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.00433,"kevAdded":null},{"id":"CVE-2026-53755","published":"2026-06-23T18:15:31.586Z","updated":"2026-06-26T15:01:29.554Z","title":"Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check","severity":"HIGH","score":8.6,"vendor":"unclecode","product":"crawl4ai","kev":false,"epss":0.01577,"kevAdded":null},{"id":"CVE-2026-26217","published":"2026-02-12T15:33:27.454Z","updated":"2026-10-08T15:22:19.703Z","title":"Crawl4AI < 0.8.0 Docker API Local File Inclusion via file URL Handling","severity":"CRITICAL","score":9.2,"vendor":"unclecode","product":"Crawl4AI","kev":false,"epss":0.02097,"kevAdded":null},{"id":"CVE-2026-26216","published":"2026-02-12T15:31:20.810Z","updated":"2026-10-08T15:22:19.120Z","title":"Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter","severity":"CRITICAL","score":10,"vendor":"unclecode","product":"Crawl4AI","kev":false,"epss":0.06418,"kevAdded":null}]}