https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 21:44:36 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-371596 EUVD-2026-371596 https://cve.radiocsirt.org/vuln/euvd-2026-371596 https://cve.radiocsirt.org/vuln/fkie_cve-2026-91944 <p>crawl4ai versions before 0.9.3 contain a DOM-based cross-site scripting vulnerability in the Playground UI where the forceHighlightElement() function assigns textContent back to innerHTML, re-parsing JSON responses as HTML. Attackers can inject malicious scripts through crawled page content like the page title to steal the operator&#39;s API token from sessionStorage and gain full server control.</p> <p>crawl4ai versions before 0.9.3 contain a DOM-based cross-site scripting vulnerability in the Playground UI where the forceHighlightElement() function assigns textContent back to innerHTML, re-parsing JSON responses as HTML. Attackers can inject malicious scripts through crawled page content like the page title to steal the operator&#39;s API token from sessionStorage and gain full server control.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-91944 https://cve.radiocsirt.org/vuln/ghsa-hr2f-r8c5-ggxp <p>crawl4ai versions before 0.9.3 contain a DOM-based cross-site scripting vulnerability in the Playground UI where the forceHighlightElement() function assigns textContent back to innerHTML, re-parsing JSON responses as HTML. Attackers can inject malicious scripts through crawled page content like the page title to steal the operator&#39;s API token from sessionStorage and gain full server control.</p> <p>crawl4ai versions before 0.9.3 contain a DOM-based cross-site scripting vulnerability in the Playground UI where the forceHighlightElement() function assigns textContent back to innerHTML, re-parsing JSON responses as HTML. Attackers can inject malicious scripts through crawled page content like the page title to steal the operator&#39;s API token from sessionStorage and gain full server control.</p> https://cve.radiocsirt.org/vuln/ghsa-hr2f-r8c5-ggxp