Latest high and critical flaws
- CVE-2026-119120 Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request bodies, allowing authenticated clients to cHigh 7.7 · Oct 29, 2026
- CVE-2026-119119 Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where _clamp_untrusted() fails to cap the delay_before_return_html, meHigh 8.7 · Oct 29, 2026
- CVE-2026-119118 Crawl4AI before 0.9.5 contains an improper certificate validation vulnerability that allows network attackers to intercept crawls because Chromium always launchHigh 8.3 · Oct 29, 2026
- CVE-2026-115508 Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients tHigh 7.1 · Oct 22, 2026
- CVE-2026-109238 Crawl4AI 0.7.0 before 0.9.4 contains a server-side request forgery vulnerability that allows API clients to reach internal addresses by enabling link_preview_coCritical 9.2 · Oct 12, 2026
- CVE-2026-109237 Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping thHigh 8.6 · Oct 12, 2026
- CVE-2026-91943 Crawl4AI before 0.9.3 contains a server-side request forgery vulnerability in PDFContentScrapingStrategy where _get_pdf_path() re-downloads targets with Python High 8.3 · Sep 15, 2026
- CVE-2026-91941 Crawl4AI before 0.9.3 contains an uncontrolled resource consumption vulnerability in PDFContentScrapingStrategy that allows untrusted clients to cause denial ofHigh 8.7 · Sep 15, 2026
- CVE-2026-91940 crawl4ai before 0.9.3 contains an arbitrary file write vulnerability in PDFContentScrapingStrategy where the _filter_untrusted_fields function fails to validateHigh 8.7 · Sep 15, 2026
- CVE-2026-57573 Crawl4AI is an open-source LLM-friendly web crawler and scraper.High 8.6 · Jul 6, 2026
- CVE-2026-57572 Crawl4AI is an open-source LLM-friendly web crawler and scraper.Critical 10 · Jul 6, 2026
- CVE-2026-57571 Crawl4AI is an open-source LLM-friendly web crawler and scraper.Critical 9.6 · Jul 6, 2026
- CVE-2026-53755 Crawl4AI is an open-source LLM friendly web crawler & scraper.High 8.6 · Jun 23, 2026
- CVE-2026-53754 Crawl4AI is an open-source LLM friendly web crawler & scraper.High 7.5 · Jun 23, 2026
- CVE-2026-53753 Crawl4AI is an open-source LLM friendly web crawler & scraper.Critical 9.8 · Jun 23, 2026
- CVE-2026-26217 Crawl4AI versions prior to 0.8.0 contain a local file inclusion vulnerability in the Docker API deployment.Critical 9.2 · Feb 12, 2026
- CVE-2026-26216 Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment.Critical 10 · Feb 12, 2026
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.