6 matches found
PYSEC-2026-1281 Crawl4AI SSRF vulnerability
Crawl4AI =0.4.247 is vulnerable to SSRF in /crawl4ai/asyncdispatcher.py...
6.9CVSS5.9AI score0.00347EPSS
SaveExploits0References5
CVE-2025-28197
Crawl4AI =0.4.247 is vulnerable to SSRF in /crawl4ai/asyncdispatcher.py...
9.1CVSS6.8AI score0.00347EPSS
SaveExploits0References1
Server-side Request Forgery (SSRF)
Overview Crawl4AI is a 🚀🤖 Crawl4AI: Open-source LLM Friendly Web Crawler & scraper Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through the asyncdispatcher.py module. An attacker can manipulate the server into making arbitrary requests to internal or extern...
9.1CVSS7AI score0.00347EPSS
SaveExploits0References2
CVE-2025-28197
Crawl4AI =0.4.247 is vulnerable to SSRF in /crawl4ai/asyncdispatcher.py...
9.1CVSS5.8AI score0.00347EPSS
SaveExploits0References1
20