pypi

crawl4ai

22 Total advisories

22 Vulnerabilities

0 Malware

Dependency scanning

Check whether crawl4ai is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

crawl4ai

Vulnerabilities

Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API

CVE-2026-56262

CVE-2026-56262

CVE-2026-56262

CVE-2026-56262

Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution

Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)

Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check

CVE-2026-53755

CVE-2026-53754

Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API

Crawl4AI: Arbitrary file write (symlink/TOCTOU) plus log and webhook-header injection in Docker server

CVE-2026-56258

Crawl4AI: Arbitrary file write (path traversal) in crawler downloads can lead to RCE

Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args

Crawl4AI: Unauthenticated SSRF on the Docker server streaming crawl path (/crawl/stream)

Crawl4AI: LLM credential exfiltration in Docker server via request base_url and env: token resolution

Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter

Crawl4AI Has Local File Inclusion in Docker API via file:// URLs

CVE-2026-26217

CVE-2026-26216

Crawl4AI SSRF vulnerability

Browse more PyPI advisories

Start Securing