CVE-2026-72904: Improper Neutralization of Special Elements used in a Command

Firecrawl turns entire websites into LLM-ready markdown or structured data. Prior to 2.11.32, a critical arbitrary file read vulnerability exists in Firecrawl's extraction functionality due to unsafe schema dereferencing of user-supplied JSON schemas in...

PT-2026-69973

Name of the Vulnerable Software and Affected Versions Firecrawl versions prior to 2.11.32 Description An arbitrary file read and Server-Side Request Forgery SSRF issue exists in the extraction functionality. The problem stems from unsafe schema dereferencing of user-supplied JSON schemas in the...