Skip to content
OpenAdvisories

Package · Packagist

tomasnorre/crawler

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.1
    CVE-2026-8727

    Remote Code Execution in extension "Site Crawler" (crawler)

    The Crawler extension passes the X-T3Crawler-Meta response header from crawled URLs directly to PHP's unserialize(). An attacker controlling a crawled endpoint can inject arbitrary serialized PHP objects, leading to Remote Code Execution on the TYPO3 server. …

    TYPO3 Extension "Site Crawler" tomasnorre/crawler Packagist