CVE-2026-115508

The Crawl4AI library (versions 0.7.0 before 0.9.5 ) is vulnerable to a Regular Expression Denial of Service (ReDoS) via the /crawl request body. The root cause is inefficient regular expression complexity, which allows authenticated API clients to supply unbounded regular expressions in fields su...

EUVD-2026-108340

Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unbounded regular expressions in /crawl request bodies. Attackers can submit catastrophic-backtracking patterns via...