UN
Vendor
unclecode
18
CVEs
0
On KEV
5
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115508 New | CR crawl4ai unclecode | 6.5 | Oct 22 | Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields |
| CVE-2026-112363 | CR crawl4ai unclecode | 5.3 | Oct 19 | Crawl4AI 0.8.7 through 0.9.5 SSRF Bypass via SSLCertificate.from_url URL Userinfo |
| CVE-2026-109239 | CR crawl4ai unclecode | 5.3 | Oct 12 | Crawl4AI before 0.9.4 Blind SSRF via RobotsParser.can_fetch robots.txt Fetch |
| CVE-2026-109238 | CR crawl4ai unclecode | 8.6 | Oct 12 | Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seeder |
| CVE-2026-109237 | CR crawl4ai unclecode | 8.1 | Oct 12 | Crawl4AI 0.9.0 before 0.9.4 Untrusted Config Gate Bypass Leaks Environment Variables |
| CVE-2026-91944 | CR crawl4ai unclecode | 6.1 | Sep 15 | crawl4ai before 0.9.3 DOM-based XSS via Playground UI |
| CVE-2026-91943 | CR crawl4ai unclecode | 7.7 | Sep 15 | Crawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategy |
| CVE-2026-91942 | CR crawl4ai unclecode | 5.4 | Sep 15 | crawl4ai before 0.9.3 Cross-Site Scripting via innerHTML |
| CVE-2026-91941 | CR crawl4ai unclecode | 7.5 | Sep 15 | Crawl4AI before 0.9.3 Denial of Service via PDFContentScrapingStrategy |
| CVE-2026-91940 | CR crawl4ai unclecode | 7.5 | Sep 15 | crawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategy |
| CVE-2026-57572 | CR crawl4ai unclecode | 10.0 | Jul 6 | Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args |
| CVE-2026-57573 | CR crawl4ai unclecode | 8.6 | Jul 6 | Crawl4AI unauthenticated SSRF in Docker streaming crawl endpoint |
| CVE-2026-57571 | CR crawl4ai unclecode | 9.6 | Jul 6 | Crawl4AI arbitrary file write via download filename path traversal |
| CVE-2026-53753 | CR crawl4ai unclecode | 10.0 | Jun 23 | Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API |
| CVE-2026-53754 | CR crawl4ai unclecode | 7.5 | Jun 23 | Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped) |
| CVE-2026-53755 | CR crawl4ai unclecode | 7.5 | Jun 23 | Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check |
| CVE-2026-26217 | CR Crawl4AI unclecode | 7.5 | Feb 12 | Crawl4AI < 0.8.0 Docker API Local File Inclusion via file URL Handling |
| CVE-2026-26216 | CR Crawl4AI unclecode | 10.0 | Feb 12 | Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter |