PYSEC-2026-229

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability in the monitor router endpoints that allows unauthenticated attackers to access destructive operations. Remote attackers can invoke the /monitor/actions/cleanup endpoint and manipulate monitoring state without authentication,...

adorable-cli (>=0.1.10 <=0.2.9), agent-memory-labs (>=0.1.0 <=0.1.14) +136 more potentially affected by CVE-2025-28197 via crawl4ai (>=0.3.5 <=0.8.9)

crawl4ai PYPI version =0.3.5, =0.1.10, =0.1.0, =0.2.1, =0.1.6, =0.1.0, =0.1.2, =0.1.0, =0.1.10, =0.10.0, =0.1.0, =2.0.1, =0.1.1, =0.1.2 and more Source cves: CVE-2025-28197 Source advisory: SNYK:PYTHON-CRAWL4AI-10116190...