https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:50:59.128573+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-370576 EUVD-2026-370576 2026-10-06T15:50:59.176228+00:00 EUVD-2026-370576 https://cve.radiocsirt.org/vuln/fkie_cve-2026-91942 fkie_cve-2026-91942 2026-10-06T15:50:59.176270+00:00

crawl4ai before 0.9.3 contains a DOM-based cross-site scripting vulnerability in the Docker Playground UI that assigns untrusted crawl results to element.innerHTML. Attackers can craft malicious PDFs with event-handler markup to execute JavaScript in the Playground origin and steal API tokens from sessionStorage for authenticated API abuse.

 https://cve.radiocsirt.org/vuln/ghsa-xjmx-xxmr-qf54 GHSA-xjmx-xxmr-qf54 2026-10-06T15:50:59.176304+00:00

crawl4ai before 0.9.3 contains a DOM-based cross-site scripting vulnerability in the Docker Playground UI that assigns untrusted crawl results to element.innerHTML. Attackers can craft malicious PDFs with event-handler markup to execute JavaScript in the Playground origin and steal API tokens from sessionStorage for authenticated API abuse.