pypi

scrapy

27 Total advisories

27 Vulnerabilities

0 Malware

Dependency scanning

Check whether scrapy is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

scrapy

Vulnerabilities

Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default

Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default

Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation

Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation

Scrapy HTTP authentication credentials potentially leaked to target websites

Scrapy decompression bomb vulnerability

Scrapy authorization header leakage on cross-domain redirect

Scrapy decompression bomb vulnerability

Scrapy authorization header leakage on cross-domain redirect

CVE-2024-1968

CVE-2024-1892

Scrapy denial of service vulnerability

Scrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddleware

CVE-2022-0577

CVE-2017-14158

Scrapy leaks the authorization header on same-domain but cross-origin redirects

Scrapy vulnerable to ReDoS via XMLFeedSpider

Scrapy cookie-setting is not restricted based on the public suffix list

Duplicate Advisory: Scrapy leaks the authorization header on same-domain but cross-origin redirects

Scrapy allows redirect following in protocols other than HTTP

Duplicate Advisory: ReDos vulnerability of XMLFeedSpider

Scrapy before 2.6.2 and 1.8.3 vulnerable to one proxy sending credentials to another

Scrapy's redirects ignoring scheme-specific proxy settings

Duplicate Advisory: Scrapy decompression bomb vulnerability

Duplicate Advisory: Scrapy authorization header leakage on cross-domain redirect

Incorrect Authorization and Exposure of Sensitive Information to an Unauthorized Actor in scrapy

CVE-2021-41125

Browse more PyPI advisories

Start Securing