152 matches found
Server-side Request Forgery (SSRF)
Overview Crawl4AI is a 🚀🤖 Crawl4AI: Open-source LLM Friendly Web Crawler & scraper Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through the asyncdispatcher.py module. An attacker can manipulate the server into making arbitrary requests to internal or extern...
Crawl4AI SSRF vulnerability
Crawl4AI =0.4.247 is vulnerable to SSRF in /crawl4ai/asyncdispatcher.py...
ayy (>=0.1.6 <=0.1.8), camel-database-agent (>=0.1.0 <=0.2.0) +5 more potentially affected by CVE-2025-28197 via crawl4ai (>=0.3.5 <=0.4.24)
crawl4ai PYPI version =0.3.5, =0.1.6, =0.1.0, =0.1.0, =0.1.0, =0.1.7.4 - taskcraft =0.3.0 Source cves: CVE-2025-28197 Source advisory: OSV:GHSA-445M-27CF-GR3X...
GHSA-445M-27CF-GR3X Crawl4AI SSRF vulnerability
Crawl4AI =0.4.247 is vulnerable to SSRF in /crawl4ai/asyncdispatcher.py...
CVE-2025-28197
Crawl4AI =0.4.247 is vulnerable to SSRF in /crawl4ai/asyncdispatcher.py...
CVE-2025-28197
Crawl4AI =0.4.247 is vulnerable to SSRF in /crawl4ai/asyncdispatcher.py...
PT-2025-17342
Name of the Vulnerable Software and Affected Versions Crawl4AI versions 0.4.247 and earlier Description The issue concerns a Server-Side Request Forgery SSRF vulnerability. It is located in the /crawl4ai/async dispatcher.py file. Recommendations For versions 0.4.247 and earlier, update to a versi...
CVE-2025-28197
CVE-2025-28197 relates to Crawl4AI
CVE-2025-28197
Crawl4AI =0.4.247 is vulnerable to SSRF in /crawl4ai/asyncdispatcher.py...
CVE-2025-28197
Crawl4AI =0.4.247 is vulnerable to SSRF in /crawl4ai/asyncdispatcher.py...
Crawl4AI 安全漏洞
Crawl4AI is an open source LLM-friendly web crawler and crawler from the individual developers at UncleCode. A security vulnerability exists in Crawl4AI 0.4.247 and earlier versions, which stems from a server-side request forgery in /crawl4ai/asyncdispatcher.py...
