CVE-2026-18647

A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue affects the function isValidTLD of the file /backend/functions/src/cloud-functions/crawler.ts of the component Crawler/Puppeteer. The manipulation leads to server-side request...

CVE-2026-18647

The CVE concerns jina-ai reader (up to 1574bfd3…) with a flaw in isValidTLD in the Crawler/Puppeteer component (file backend/functions/src/cloud-functions/crawler.ts) that enables server-side request forgery. Remote exploitation is possible and the exploit has been publicly disclosed. Description...

CVE-2026-18647: Server-Side Request Forgery (SSRF)

A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue affects the function isValidTLD of the file /backend/functions/src/cloud-functions/crawler.ts of the component Crawler/Puppeteer. The manipulation leads to server-side request...