Skip to content
OpenAdvisories

Vendor

firecrawl

5 known vulnerabilities.

Products

firecrawl 4 firecrawl-mcp-server 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-72904

    Firecrawl: Arbitrary file read via JSON Schema $ref expansion

    Firecrawl turns entire websites into LLM-ready markdown or structured data. Prior to 2.11.32, a critical arbitrary file read vulnerability exists in Firecrawl's extraction functionality due to unsafe schema dereferencing of user-supplied JSON schemas in apps/…

    firecrawl firecrawl