Vulnerabilities in Firecrawl

5 results

CVE-2026-85606HIGHfirecrawl-mcp-server 3.20.2 Arbitrary Local File Read via filePathEPSS 0.9%CVE-2026-72904CRITICALFirecrawl: Arbitrary file read via JSON Schema $ref expansionEPSS 0.5%CVE-2026-32857HIGHFirecrawl Playwright Service SSRF Protection Bypass via Missing Post-Redirect ValidationEPSS 0.4%CVE-2025-57818MEDIUMFirecrawl SSRF Vulnerability via malicious webhookEPSS 0.3%CVE-2026-116066HIGHFirecrawl before 2.11.586 SSRF Protection Bypass via DNS Rebinding in Playwright ServiceEPSS 0.3%