Login Request a demo
CR
Product
Crawl4AI
by Crawl4AI · last CVE Jul 12, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 4Medium 3Low 0
Severity
All severities9Critical2High4Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Crawl4AI to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-56265
9.8
3%
Jun 21
Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key
Affected: before 0.8.7
CVE-2026-56260
9.1
1%
Jul 12
Crawl4AI - Arbitrary File Write via output_path Parameter
Affected: before 0.8.7
CVE-2026-56266
8.6
0%
Jun 22
Crawl4AI - Server-Side Request Forgery via Direct Crawl Endpoints
Affected: before 0.8.7
CVE-2026-56259
8.2
0%
Jul 12
Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Resolution
Affected: before 0.8.8
CVE-2026-56258
8.1
1%
Jun 23
Crawl4AI - Arbitrary File Write via output_path Symlink and TOCTOU
Affected: before 0.8.8
CVE-2026-56261
7.5
1%
Jul 10
Crawl4AI - Server-Side Request Forgery via Webhook URLs
Affected: before 0.8.7
CVE-2026-56262
6.5
1%
Jun 24
Crawl4AI - Unauthenticated Access to Monitor Endpoints via Docker API Server
Affected: before 0.8.7
CVE-2026-56264
6.1
0%
Jun 30
Crawl4AI - Arbitrary JavaScript Execution via /execute_js Endpoint
Affected: before 0.8.7
CVE-2026-56263
6.1
0%
Jun 23
Crawl4AI - Stored Cross-Site Scripting in Monitor Dashboard
Affected: before 0.8.7
Showing 9