Skip to content
OpenAdvisories

Vendor

unclecode

23 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-91940 Public exploit

    crawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategy

    crawl4ai before 0.9.3 contains an arbitrary file write vulnerability in PDFContentScrapingStrategy where the _filter_untrusted_fields function fails to validate untrusted configuration fields. Attackers can submit crafted config bodies with malicious image_sa…