PyPI/crawl4ai CVE-2026-53755: high 7.5, EPSS 1.58%
Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.9, the Docker API server applied its SSRF destination check to the crawl target URL only, not to the proxy address. An unaut
Action: Upgrade crawl4ai to 0.8.9 or later.
pip install crawl4ai==0.8.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.9 | - |
Fixed versions
| 0.8.9 |
Sources
CVE-2026-53755 · published · modified · JSON