1 matches found
CVE-2026-53754: Server-Side Request Forgery (SSRF)
Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.8, the Docker API server's SSRF protection validatewebhookurl / validateurldestination in deploy/docker/utils.py used an explicit IPv4/IPv6 CIDR blocklist that missed several address families. An attacker could reach...
7.5CVSS5.9AI score0.00433EPSS
SaveExploits0References3
20