EUVD-2026-113186

Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where clampuntrusted fails to cap the delaybeforereturnhtml, meandelay, and maxrange fields of untrusted CrawlerRunConfig bodies. Unauthenticated attackers can send huge values to /crawl or /crawl/stream to...

CVE-2026-119119

Crawl4AI versions before 0.9.5 are vulnerable to a Denial of Service (DoS) attack within the Docker API server. The root cause is a failure in the _clamp_untrusted() function to properly cap the delay_before_return_html, mean_delay, and max_range fields in untrusted CrawlerRunConfig bodies. An un...

CVE-2026-119119 Crawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay Fields

Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where clampuntrusted fails to cap the delaybeforereturnhtml, meandelay, and maxrange fields of untrusted CrawlerRunConfig bodies. Unauthenticated attackers can send huge values to /crawl or /crawl/stream to...