Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:crawl4ai:crawl4ai:*:*:*:*:*:*:*:*

2 briefs RSS
high advisory

Crawl4AI: Denial of service in Docker API server (CVE-2026-119119)

Crawl4AI versions prior to 0.9.5 are vulnerable to a denial-of-service attack due to improper validation of delay parameters in untrusted CrawlerRunConfig requests, allowing unauthenticated attackers to exhaust browser page resources.

Crawl4AI +1 denial-of-service input-validation web-api
1t 2c
high advisory

Arbitrary File Write Vulnerability in crawl4ai PDFContentScrapingStrategy

The PDFContentScrapingStrategy in crawl4ai versions prior to 0.9.3 is vulnerable to arbitrary file write via insufficient input validation in the _filter_untrusted_fields function, allowing attackers to overwrite sensitive files.

PoC crawl4ai denial-of-service web-scraping cve-2026-91941
2t 2c updated