CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

9 matches found

RedhatCVE•added 2026/02/13 7:18 p.m.•6 views

CVE-2026-26216

Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec. The import builtin was included in the allowed builtins, allowing unauthenticated remote...

10CVSS6.7AI score0.01589EPSS

Exploits0References1

EUVD•added 2025/10/03 8:7 p.m.•3 views

EUVD-2025-11903

Malicious code in bioql PyPI...

9.1CVSS6.3AI score0.00296EPSS

Exploits0References3

Veracode•added 2025/04/29 5:39 a.m.•3 views

Server-Side Request Forgery (SSRF)

Crawl4AI is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper input validation and insufficient sanitization of user-controlled URLs in /crawl4ai/asyncdispatcher.py, allowing unauthorized internal network access...

9.1CVSS6.7AI score0.00296EPSS

Exploits0References3Affected Software1

vulnersOsv•added 2025/04/18 9:31 p.m.•9 views

adorable-cli (>=0.1.10 <=0.2.9), agent-memory-labs (>=0.1.0 <=0.1.14) +139 more potentially affected by CVE-2025-28197 via crawl4ai (>=0.3.5 <=0.8.6)

crawl4ai PYPI version =0.3.5, =0.1.10, =0.1.0, =0.2.1, =0.1.6, =0.1.0, =0.1.2, =0.1.0, =0.1.10, =0.10.0, =0.1.0, =2.0.1, =0.1.1, =0.1.2 and more Source cves: CVE-2025-28197 Source advisory: SNYK:PYTHON-CRAWL4AI-10116190...

9.1CVSS5.4AI score0.00296EPSS

Exploits0