https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T17:24:06.061729+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-336920 EUVD-2026-336920 2026-10-05T17:24:06.064346+00:00 EUVD-2026-336920 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56265 fkie_cve-2026-56265 2026-10-05T17:24:06.064378+00:00

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API server. Attackers who know the default key can forge valid authentication tokens for any user, bypassing authentication and gaining full access to protected functionality.

 https://cve.radiocsirt.org/vuln/ghsa-8qrg-7j2f-rf2h GHSA-8qrg-7j2f-rf2h — Crawl4AI: authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API server 2026-10-05T17:24:06.064408+00:00

Affected: PyPI: crawl4ai

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API server. Attackers who know the default key can forge valid authentication tokens for any user, bypassing authentication and gaining full access to protected functionality.

 https://cve.radiocsirt.org/vuln/pysec-2026-239 PYSEC-2026-239 2026-10-05T17:24:06.064432+00:00

Affected: PyPI: crawl4ai

Crawl4AI before 0.8.7 contains an authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API server. Attackers who know the default key can forge valid authentication tokens for any user, bypassing authentication and gaining full access to protected functionality.