Description
Crawl4AI <=0.4.247 is vulnerable to SSRF in /crawl4ai/async_dispatcher.py.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | crawl4ai | <= 0.4.247 | — | GHSA-445m-27cf-gr3x |
Critical · 9.1
CVE-2025-28197
EUVD-2025-11903GHSA-445m-27cf-gr3xPYSEC-2026-1281
Crawl4AI SSRF vulnerability
Published Apr 18, 2025 · Updated Apr 22, 2025 · Assigned by mitre