UncleCode Crawl4AI code injection vulnerability

UncleCode Crawl4AI versions prior to 0.9.0 through 0.9.5 contain a code injection vulnerability. This flaw stems from improper handling of the cssselector and waitfor fields by the Docker API server. Attackers can inject quotes or js: conditions to bypass the jscode block, allowing authenticated...