CR
Product
crawl4ai
18
CVEs
0
On KEV
10.0
Max CVSS
5
New 30D
Severity mix
Critical 4High 9Medium 5Low 0
Watch
Add crawl4ai to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-115508 New | 6.5 | Oct 22 | Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields Affected: 0.7.0 before 0.9.5 |
| CVE-2026-91944 | 6.1 | Sep 15 | crawl4ai before 0.9.3 DOM-based XSS via Playground UI Affected: before 0.9.3 |
| CVE-2026-91942 | 5.4 | Sep 15 | crawl4ai before 0.9.3 Cross-Site Scripting via innerHTML Affected: before 0.9.3 |
| CVE-2026-112363 | 5.3 | Oct 19 | Crawl4AI 0.8.7 through 0.9.5 SSRF Bypass via SSLCertificate.from_url URL Userinfo Affected: 0.8.7 through 0.9.5 |
| CVE-2026-109239 | 5.3 | Oct 12 | Crawl4AI before 0.9.4 Blind SSRF via RobotsParser.can_fetch robots.txt Fetch Affected: before 0.9.4 |
Showing 5
