medium6.9
CVE-2026-119122
Crawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness Check
unclecode · crawl4ai
crawl4ai
Follow this packageGet the evidence behind this dependency. Browse imported advisories below, or check an exact version against OSV now. View source coverage.
Check the version you ship.
Get a fresh OSV lookup for an exact release. We send the package name and version to OSV without storing a report.
Advisories & recorded fixes
medium5.3
CVE-2026-119121
Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_for
unclecode · crawl4ai
high7.7
CVE-2026-119120
Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_name
unclecode · crawl4ai
high8.7
CVE-2026-119119
Crawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay Fields
unclecode · crawl4ai
high8.3
CVE-2026-119118
Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flags
unclecode · crawl4ai
high7.1