Skip to content
OpenAdvisories

Vendor

apify

4 known vulnerabilities.

Products

apify-mcp-server 2 crawlee-python 1 actors-mcp-server 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-46341

    Apify MCP server: Domain Allowlist Bypass in fetch-apify-docs via String Prefix Matching

    The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store. Prior to 0.9.21, the fetch-apify-docs tool in src/tools/common/fetch_apify_docs.ts validates allowlist…

    apify apify-mcp-server @apify/actors-mcp-server npm