CVE-2026-53754

creationtimestamp| type| source ---|---|--- 2026-06-23 20:13:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moy7md5vu525 2026-06-29 17:28:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgz6gfybv2t...

CVE-2026-53754 Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)

Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.8, the Docker API server's SSRF protection validatewebhookurl / validateurldestination in deploy/docker/utils.py used an explicit IPv4/IPv6 CIDR blocklist that missed several address families. An attacker could reach...