CVE-2026-18647 jina-ai reader Crawler/Puppeteer crawler.ts isValidTLD server-side request forgery

A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue affects the function isValidTLD of the file /backend/functions/src/cloud-functions/crawler.ts of the component Crawler/Puppeteer. The manipulation leads to server-side request...

PT-2026-67509

Name of the Vulnerable Software and Affected Versions jina-ai reader versions up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1 Description A flaw in the Crawler/Puppeteer component allows remote attackers to perform server-side request forgery SSRF, a technique where an attacker induces a server-si...