Known CVE

crawl4ai < 0.8.9 - Server Side Request Forgery

Crawl4AI < 0.8.9 contains a server-side request forgery caused by insufficient SSRF destination checks on proxy addresses in browser and crawler configurations, letting unauthenticated attackers access internal services and cloud metadata endpoints.

CVE-2026-53755

High2026CVSS 8.2CWE-918

cve2026 · crawl4ai · ssrf · unauth · proxy · oast

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website