https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T09:06:08.436576+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-56261 CVE-2026-56261 — Crawl4AI - Server-Side Request Forgery via Webhook URLs 2026-10-05T09:06:08.438173+00:00

Affected: Crawl4AI

Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, or cloud metadata endpoints (e.g. 169.254.169.254), causing the server to make requests to internal services and potentially expose cloud metadata.

 https://cve.radiocsirt.org/vuln/ghsa-f23g-2f38-gg94 GHSA-f23g-2f38-gg94 2026-10-05T09:06:08.438227+00:00

Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, or cloud metadata endpoints (e.g. 169.254.169.254), causing the server to make requests to internal services and potentially expose cloud metadata.