Skip to content
OpenAdvisories

Vendor

apify

4 known vulnerabilities.

Products

apify-mcp-server 2 crawlee-python 1 actors-mcp-server 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2026-81093

    Apify Actors MCP Server before 0.9.12 Server-Side Request Forgery via get-html-skeleton

    The get-html-skeleton tool fetched a URL the caller supplied after checking only its syntax. The handler in src/tools/common/get_html_skeleton.ts validated the url argument with isValidHttpUrl from src/utils/generic.ts, which confirmed the string began with a…

    apify actors-mcp-server
  • High 8.1
    CVE-2026-50143

    Actor MCP path authority injection leaks Apify token

    The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store. Prior to 0.10.11, getActorMCPServerURL in src/mcp/actors.ts concatenates the trusted Actor standby URL…

    apify apify-mcp-server @apify/actors-mcp-server npm