{"data":{"id":"e21ef9fd-3db9-4542-b3e6-74ad370e68b5","title":"GHSA-4qqr-vv2q-cmr5: Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)","summary":"Crawl4AI's Docker API server used an incomplete IPv4/IPv6 CIDR blocklist in its SSRF protection (validate_webhook_url and validate_url_destination in deploy/docker/utils.py), affecting crawl and webhook URLs. An unauthenticated attacker, since jwt_enabled defaults to false, could reach internal services and cloud metadata endpoints such as 169.254.169.254 by encoding that address in NAT64, 6to4, IPv4-mapped or IPv4-compatible IPv6 forms, or by using the IPv6 unspecified address.","solution":"The blocklist is replaced by a rule that rejects any resolved IP where not ip.is_global, applied to the address and every embedded IPv4 transition form, and error messages no longer echo the resolved IP. Workarounds: upgrade to the patched version, enable authentication (CRAWL4AI_API_TOKEN), and restrict the container's outbound network access (egress firewall / no metadata route).","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-4qqr-vv2q-cmr5","publishedAt":"2026-06-16T21:00:04.000Z","cveId":"CVE-2026-53754","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["crawl4ai@<= 0.8.7 (fixed: 0.8.8)"],"affectedPackageNames":["crawl4ai"],"affectedPackageRefs":["pypi:crawl4ai"],"affectedVendors":[],"affectedVendorsRaw":["Crawl4AI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00433,"epssCheckedAt":"2026-11-04T18:09:14.312Z","kevDateAdded":null,"advisoryAliases":["GHSA-4qqr-vv2q-cmr5"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-06-16T21:00:04.000Z","fixReleasedAt":"2026-06-04T01:38:34.672Z","daysToFix":-12,"fixCheckedAt":"2026-10-29T21:34:30.275Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"crawl4ai","fixedVersion":"0.8.8","matchedVersion":"0.8.8","fixReleasedAt":"2026-06-04T01:38:34.672Z","daysToFix":-12,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:34:30.129Z"}]}}