{"data":{"id":"c9d3a798-39a0-4ef9-b9c0-8ec987f2b685","title":"GHSA-365w-hqf6-vxfg: Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution","summary":"GHSA-365w-hqf6-vxfg describes multiple security vulnerabilities in the Crawl4AI Docker API server, affecting crawling, markdown/LLM extraction, screenshot, PDF, webhook, monitoring, JavaScript execution and configuration endpoints. The flaws include arbitrary file write via output_path on /screenshot and /pdf, SSRF through webhook URLs and direct crawl endpoints, an authentication bypass on monitor endpoints, stored XSS in the monitor dashboard, arbitrary JavaScript execution via /execute_js, and a hardcoded JWT secret defaulting to \"mysecret\".","solution":"Upgrade to the patched version (recommended). Other workarounds: set CRAWL4AI_API_TOKEN to enable authentication, set a strong SECRET_KEY (min 32 chars) if using JWT, and restrict network access to the Docker API. Per-issue fixes include validate_output_path() restricting writes to CRAWL4AI_OUTPUT_DIR, validate_webhook_url() blocking private and metadata addresses, token_dep on the monitor router, disabling /execute_js by default via CRAWL4AI_EXECUTE_JS_ENABLED, removing the default JWT key, and normalizing IPv6-mapped IPv4 addresses before the blocklist check.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-365w-hqf6-vxfg","publishedAt":"2026-06-16T20:13:30.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["denial_of_service","other"],"issueType":"vulnerability","affectedPackages":["crawl4ai@<= 0.8.6 (fixed: 0.8.7)"],"affectedPackageNames":["crawl4ai"],"affectedPackageRefs":["pypi:crawl4ai"],"affectedVendors":[],"affectedVendorsRaw":["Crawl4AI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-365w-hqf6-vxfg"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-06-16T20:13:30.000Z","fixReleasedAt":"2026-06-01T14:24:21.773Z","daysToFix":-15,"fixCheckedAt":"2026-10-29T21:34:31.019Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"crawl4ai","fixedVersion":"0.8.7","matchedVersion":"0.8.7","fixReleasedAt":"2026-06-01T14:24:21.773Z","daysToFix":-15,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:34:30.871Z"}]}}