PT-2026-121387

crawlseo before version 0.2.4 contains a server-side request forgery vulnerability in its crawler engine where isPrivateIp fails to block reserved IP ranges such as RFC 6598 Carrier-Grade NAT, RFC 6890, TEST-NET ranges and certain IPv6 addresses, and additionally fails to pin the validated addres...

algo-crawler (>=0.0.1, <=0.0.2), omdenalore (0.2.10) +1 more potentially affected by CVE-2026-113716 via virtualenv (20.7.2)

virtualenv PYPI version 20.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - algo-crawler =0.0.1, =0.1.2, =0.1.3 Source cves: CVE-2026-113716 Source advisory: OSV:GHSA-CW65-GX24-RC82...

algo-crawler (>=0.0.1, <=0.0.2), omdenalore (0.2.10) +1 more potentially affected by CVE-2026-113724 via virtualenv (20.7.2)

virtualenv PYPI version 20.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - algo-crawler =0.0.1, =0.1.2, =0.1.3 Source cves: CVE-2026-113724 Source advisory: OSV:GHSA-43MP-35Q3-X3FQ...

algo-crawler (>=0.0.1, <=0.0.2), omdenalore (0.2.10) +1 more potentially affected by CVE-2026-113722 via virtualenv (20.7.2)

virtualenv PYPI version 20.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - algo-crawler =0.0.1, =0.1.2, =0.1.3 Source cves: CVE-2026-113722 Source advisory: OSV:GHSA-C978-59M8-C77V...

algo-crawler (>=0.0.1, <=0.0.2), omdenalore (0.2.10) +1 more potentially affected by CVE-2026-113725 via virtualenv (20.7.2)

virtualenv PYPI version 20.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - algo-crawler =0.0.1, =0.1.2, =0.1.3 Source cves: CVE-2026-113725 Source advisory: OSV:GHSA-VXJ4-Q4G9-CRJ7...

algo-crawler (>=0.0.1, <=0.0.2), omdenalore (0.2.10) +1 more potentially affected by CVE-2026-113726 via virtualenv (20.7.2)

virtualenv PYPI version 20.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - algo-crawler =0.0.1, =0.1.2, =0.1.3 Source cves: CVE-2026-113726 Source advisory: OSV:GHSA-5VJQ-RRRF-7H2Q...

algo-crawler (>=0.0.1, <=0.0.2), omdenalore (0.2.10) +1 more potentially affected by CVE-2026-113732 via virtualenv (20.7.2)

virtualenv PYPI version 20.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - algo-crawler =0.0.1, =0.1.2, =0.1.3 Source cves: CVE-2026-113732 Source advisory: OSV:GHSA-C947-3PG5-GM8Q...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.0, <=6.10.5), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.0, <=6.10.5) +328 more potentially affected by CVE-2026-76184 via org.eclipse.jetty:jetty-client (>=10.0.0-alpha0, <=10.0.26)

org.eclipse.jetty:jetty-client MAVEN version =10.0.0-alpha0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =11.0.1, =2.12.0, =2.9, =10.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0...

lightnovel-crawler (>=2.7.15, <=2.10.1) potentially affected by CVE-2026-106443 via weasyprint (45.0.0)

weasyprint PYPI version 45.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - lightnovel-crawler =2.7.15, =2.10.1 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

lightnovel-crawler (>=2.11.0, <=2.11.1) potentially affected by CVE-2026-106443 via weasyprint (48.0.0)

weasyprint PYPI version 48.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - lightnovel-crawler =2.11.0, =2.11.1 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

amundsen-metadata (>=1.0.18, <=2.5.4), amundsen-search (>=2.4.1, <=2.5.1) +8 more potentially affected by CVE-2026-102598 via werkzeug (0.15.3)

werkzeug PYPI version 0.15.3 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - amundsen-metadata =1.0.18, =2.4.1, =0.0.1, =0.0.6, =0.9.94, =0.0.1, =0.0.1, =0.0.1, =0.1.2 Source cves: CVE-2026-102598 Source advisory:...

CVE-2026-108786

A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function runseoaudit of the file src/core/CrawlOrchestrator.ts of the component Crawler. Such manipulation leads to server-side request forgery. The attack may be launched remotely. The exploit has been...

CVE-2026-108786 houtini-ai seo-crawler-mcp Crawler CrawlOrchestrator.ts run_seo_audit server-side request forgery

A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function runseoaudit of the file src/core/CrawlOrchestrator.ts of the component Crawler. Such manipulation leads to server-side request forgery. The attack may be launched remotely. The exploit has been...

CVE-2026-108786 houtini-ai seo-crawler-mcp Crawler CrawlOrchestrator.ts run_seo_audit server-side request forgery

A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function runseoaudit of the file src/core/CrawlOrchestrator.ts of the component Crawler. Such manipulation leads to server-side request forgery. The attack may be launched remotely. The exploit has been...

EUVD-2026-97143

A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function runseoaudit of the file src/core/CrawlOrchestrator.ts of the component Crawler. Such manipulation leads to server-side request forgery. The attack may be launched remotely. The exploit has been...

CVE-2026-108786

A vulnerability exists in houtini-ai seo-crawler-mcp up to version 2.1.5 within the Crawler component. The flaw resides specifically in the run_seo_audit function located in the src/core/CrawlOrchestrator.ts file. This vulnerability allows for server-side request forgery (SSRF) and can be launche...

CVE-2026-108786

A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function runseoaudit of the file src/core/CrawlOrchestrator.ts of the component Crawler. Such manipulation leads to server-side request forgery. The attack may be launched remotely. The exploit has been...

xcrawl3r

xcrawl3r xcrawl3r es una utilidad de línea de comandos diseñada para rastrear recursivamente páginas web en busca de URLs. Funciona recorriendo activamente los sitios web, siguiendo enlaces incrustados en páginas web y analizando archivos incluyendo sitemaps y robots.txt para descubrir cada URL. ...

CVE-2026-108786: Server-Side Request Forgery (SSRF)

A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function runseoaudit of the file src/core/CrawlOrchestrator.ts of the component Crawler. Such manipulation leads to server-side request forgery. The attack may be launched remotely. The exploit has been...

PT-2026-110420

Name of the Vulnerable Software and Affected Versions houtini-ai seo-crawler-mcp versions prior to 2.1.6 Description A remote server-side request forgery SSRF issue exists within the Crawler component. The flaw is located in the run seo audit function of the src/core/CrawlOrchestrator.ts file. SS...