Skip to content
OpenAdvisories

Vendor

ArchiveBox

2 known vulnerabilities.

Products

ArchiveBox 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-42601

    ArchiveBox Vulnerable to RCE via unvalidated per-crawl config overrides in AddView

    ArchiveBox is an open source self-hosted web archiving system. In versions 0.8.6rc0 and prior, the /add/ endpoint (AddView in core/views.py) accepts a config JSON field that gets merged into the crawl config without validation. This config is exported as envi…

    ArchiveBox ArchiveBox archivebox PyPI