CVE-2026-53755
2 advisories.
PyPI/crawl4ai CVE-2026-53755: high 8.6, EPSS 1.58%
Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check
Action: Upgrade crawl4ai to 0.8.9 or later.
pip install crawl4ai==0.8.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.9 | - |
Fixed versions
| 0.8.9 |
Sources
- osv: GHSA-6qhc-x826-342c
- https://github.com/unclecode/crawl4ai/security/advisories/GHSA-6qhc-x826-342c
- https://nvd.nist.gov/vuln/detail/CVE-2026-53755
- https://github.com/pypa/advisory-database/tree/main/vulns/crawl4ai/PYSEC-2026-588.yaml
- https://github.com/unclecode/crawl4ai
CVE-2026-53755 · published · modified · JSON
PyPI/crawl4ai CVE-2026-53755: high 7.5, EPSS 1.58%
Crawl4AI is an open-source LLM friendly web crawler & scraper. Prior to 0.8.9, the Docker API server applied its SSRF destination check to the crawl target URL only, not to the proxy address. An unaut
Action: Upgrade crawl4ai to 0.8.9 or later.
pip install crawl4ai==0.8.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.9 | - |
Fixed versions
| 0.8.9 |
Sources
CVE-2026-53755 · published · modified · JSON