https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 11:24:37 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-336916 EUVD-2026-336916 https://cve.radiocsirt.org/vuln/euvd-2026-336916 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56261 <p>Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker API server&#39;s /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, or cloud metadata endpoints (e.g. 169.254.169.254), causing the server to make requests to internal services and potentially expose cloud metadata.</p> <p>Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker API server&#39;s /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, or cloud metadata endpoints (e.g. 169.254.169.254), causing the server to make requests to internal services and potentially expose cloud metadata.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-56261 https://cve.radiocsirt.org/vuln/ghsa-f23g-2f38-gg94 <p>Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker API server&#39;s /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, or cloud metadata endpoints (e.g. 169.254.169.254), causing the server to make requests to internal services and potentially expose cloud metadata.</p> <p>Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker API server&#39;s /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, or cloud metadata endpoints (e.g. 169.254.169.254), causing the server to make requests to internal services and potentially expose cloud metadata.</p> https://cve.radiocsirt.org/vuln/ghsa-f23g-2f38-gg94 https://cve.radiocsirt.org/vuln/pysec-2026-3443 <p><strong>Affected:</strong> PyPI: crawl4ai</p> <p>Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker API server&#39;s /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, or cloud metadata endpoints (e.g. 169.254.169.254), causing the server to make requests to internal services and potentially expose cloud metadata.</p> <p><strong>Affected:</strong> PyPI: crawl4ai</p> <p>Crawl4AI before 0.8.7 contains a server-side request forgery (SSRF) vulnerability in the Docker API server&#39;s /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, or cloud metadata endpoints (e.g. 169.254.169.254), causing the server to make requests to internal services and potentially expose cloud metadata.</p> https://cve.radiocsirt.org/vuln/pysec-2026-3443