CVE-2026-46497

Crawlee is a web scraping and browser automation library. From version 1.0.0 to before version 1.7.0, Crawlee is vulnerable to SSRF via sitemap-derived URLs. This issue has been patched in version 1.7.0...

CVE-2026-46497 SSRF via sitemap-derived URLs in Crawlee for Python

Crawlee is a web scraping and browser automation library. From version 1.0.0 to before version 1.7.0, Crawlee is vulnerable to SSRF via sitemap-derived URLs. This issue has been patched in version 1.7.0...

EUVD-2026-36067

Crawlee is a web scraping and browser automation library. From version 1.0.0 to before version 1.7.0, Crawlee is vulnerable to SSRF via sitemap-derived URLs. This issue has been patched in version 1.7.0...

CVE-2026-46497 SSRF via sitemap-derived URLs in Crawlee for Python

Crawlee is a web scraping and browser automation library. From version 1.0.0 to before version 1.7.0, Crawlee is vulnerable to SSRF via sitemap-derived URLs. This issue has been patched in version 1.7.0...

CVE-2026-46497

CVE-2026-46497 affects Crawlee (Python) from 1.0.0 up to before 1.7.0. An attacker-controlled sitemap or robots.txt can cause SSRF to internal HTTP endpoints (Layer 1) via sitemap-derived URLs, potentially affecting internal services. A second Layer (Layer 2) exists for CurlImpersonateHttpClient ...

crawlee 代码问题漏洞

Crawlee is an open-source web scraping and browser automation library developed by Apify. Versions of Crawlee from 1.0.0 to 1.7.0 had code vulnerabilities. These vulnerabilities stemmed from URLs generated using site maps, which could lead to server-side request forgeing attacks...

CVE-2026-46497: Server-Side Request Forgery (SSRF)

Crawlee is a web scraping and browser automation library. From version 1.0.0 to before version 1.7.0, Crawlee is vulnerable to SSRF via sitemap-derived URLs. This issue has been patched in version 1.7.0...

Server-side Request Forgery (SSRF)

Overview crawlee is a Crawlee for Python Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the sitemap or robots.txt processing pipeline. An attacker can coerce the crawler into making requests to internal or non-HTTP endpoints by supplying a malicious sitem...