FI
Product
firecrawl
4
CVEs
0
On KEV
9.3
Max CVSS
1
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch
Add firecrawl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-72904 | 9.3 | Aug 10 | Firecrawl: Arbitrary file read via JSON Schema $ref expansion Affected: < 2.11.32 |
| CVE-2026-32857 | 8.6 | Mar 26 | Firecrawl Playwright Service SSRF Protection Bypass via Missing Post-Redirect Validation Affected: through 2.8.0 |
| CVE-2026-116066 New | 6.8 | Oct 25 | Firecrawl before 2.11.586 SSRF Protection Bypass via DNS Rebinding in Playwright Service Affected: before 2.11.586 |
| CVE-2025-57818 | 6.3 | Aug 26 | Firecrawl SSRF Vulnerability via malicious webhook Affected: < 2.0.1 |
Showing 4