Skip to content
OpenAdvisories

Package · PyPI

archivebox

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.3
    CVE-2026-42601

    ArchiveBox Vulnerable to RCE via unvalidated per-crawl config overrides in AddView

    ArchiveBox is an open source self-hosted web archiving system. In versions 0.8.6rc0 and prior, the /add/ endpoint (AddView in core/views.py) accepts a config JSON field that gets merged into the crawl config without validation. This config is exported as envi…

    ArchiveBox ArchiveBox archivebox PyPI
  • Medium 6.4
    CVE-2023-45815

    ArchiveBox: Viewing wget extractor output while logged in as an admin allows archived JS to execute in the admins context

    ArchiveBox is an open source self-hosted web archiving system. Any users who are using the `wget` extractor and view the content it outputs. The impact is potentially severe if you are logged in to the ArchiveBox admin site in the same browser session and vie…

    ArchiveBox ArchiveBox archivebox PyPI