Skip to content
OpenAdvisories

Vendor

firecrawl

5 known vulnerabilities.

Products

firecrawl 4 firecrawl-mcp-server 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-116066

    Firecrawl before 2.11.586 SSRF Protection Bypass via DNS Rebinding in Playwright Service

    Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright service SSRF proxy that allows attackers to bypass isInternalHost checks via DNS rebinding. Attackers controlling DNS for a scrape target can return a public addr…

    firecrawl firecrawl
  • Medium 6.3
    CVE-2025-57818

    Firecrawl SSRF Vulnerability via malicious webhook

    Firecrawl turns entire websites into LLM-ready markdown or structured data. Prior to version 2.0.1, a server-side request forgery (SSRF) vulnerability was discovered in Firecrawl's webhook functionality. Authenticated users could configure a webhook to an int…

    firecrawl firecrawl