CVE-2026-72904

creationtimestamp| type| source ---|---|--- 2026-08-10 21:22:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqzt2lszw2d 2026-08-11 12:20:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msslyrr2zp2o...

CVE-2026-72904 Firecrawl: Arbitrary file read via JSON Schema $ref expansion

Firecrawl turns entire websites into LLM-ready markdown or structured data. Prior to 2.11.32, a critical arbitrary file read vulnerability exists in Firecrawl's extraction functionality due to unsafe schema dereferencing of user-supplied JSON schemas in...