Vulnerabilities in scrapy
10 resultsCVE-2021-41125MEDIUMHTTP authentication credential leak to target websites in scrapyEPSS 1.3%CVE-2022-0577HIGHExposure of Sensitive Information to an Unauthorized Actor in scrapy/scrapyEPSS 1.2%CVE-2024-3572HIGHXML External Entity (XXE) Vulnerability in scrapy/scrapyEPSS 0.8%CVE-2024-1968HIGHAuthorization Header Leakage in scrapy/scrapy on Scheme Change RedirectsEPSS 0.7%CVE-2024-3574HIGHAuthorization Header Leak During Cross-Domain Redirect in scrapy/scrapyEPSS 0.6%CVE-2024-1892HIGHReDoS Vulnerability in scrapy/scrapy's XMLFeedSpiderEPSS 0.6%CVE-2025-6176HIGHBrotli decompression bomb DoS in scrapy/scrapyEPSS 0.5%CVE-2026-55520HIGHProtego: Exponential backtracking ReDoS in robots.txt URL wildcard matchingEPSS 0.5%CVE-2026-105782HIGHScrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddlewareEPSS 0.4%CVE-2026-84366HIGHScrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by defaultEPSS 0.3%