crawl4ai@0.6.0rc1 vulnerabilities

🚀🤖 Crawl4AI: Open-source LLM Friendly Web Crawler & scraper

Direct Vulnerabilities

Known vulnerabilities in the crawl4ai package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free
VulnerabilityVulnerable Version
  • M
Server-side Request Forgery (SSRF)

Crawl4AI is a 🚀🤖 Crawl4AI: Open-source LLM Friendly Web Crawler & scraper

Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) through the async_dispatcher.py module. An attacker can manipulate the server into making arbitrary requests to internal or external resources by sending crafted input to the affected module.

How to fix Server-side Request Forgery (SSRF)?

There is no fixed version for Crawl4AI.

[0,)