CVE-2026-119119 Crawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay Fields

Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where clampuntrusted fails to cap the delaybeforereturnhtml, meandelay, and maxrange fields of untrusted CrawlerRunConfig bodies. Unauthenticated attackers can send huge values to /crawl or /crawl/stream to...