Vulnerabilities in unclecode
23 resultsCVE-2026-26216CRITICALCrawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks ParameterEPSS 6.3%CVE-2026-53753CRITICALCrawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker APIEPSS 2.9%CVE-2026-26217CRITICALCrawl4AI < 0.8.0 Docker API Local File Inclusion via file URL HandlingEPSS 2.1%CVE-2026-53755HIGHCrawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF checkEPSS 1.6%CVE-2026-57572CRITICALCrawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_argsEPSS 0.9%CVE-2026-57571CRITICALCrawl4AI arbitrary file write via download filename path traversalEPSS 0.8%CVE-2026-91941HIGHCrawl4AI before 0.9.3 Denial of Service via PDFContentScrapingStrategyEPSS 0.5%CVE-2026-91940HIGHcrawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategyEPSS 0.5%CVE-2026-115508HIGHCrawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex FieldsEPSS 0.5%CVE-2026-57573HIGHCrawl4AI unauthenticated SSRF in Docker streaming crawl endpointEPSS 0.4%CVE-2026-53754HIGHCrawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)EPSS 0.4%CVE-2026-119120HIGHCrawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_nameEPSS 0.4%CVE-2026-119122MEDIUMCrawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness CheckEPSS 0.4%CVE-2026-119119HIGHCrawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay FieldsEPSS 0.4%CVE-2026-91943HIGHCrawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategyEPSS 0.4%CVE-2026-109237HIGHCrawl4AI 0.9.0 before 0.9.4 Untrusted Config Gate Bypass Leaks Environment VariablesEPSS 0.3%CVE-2026-109238CRITICALCrawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL SeederEPSS 0.3%CVE-2026-119121MEDIUMCrawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_forEPSS 0.3%CVE-2026-109239MEDIUMCrawl4AI before 0.9.4 Blind SSRF via RobotsParser.can_fetch robots.txt FetchEPSS 0.3%CVE-2026-91944MEDIUMcrawl4ai before 0.9.3 DOM-based XSS via Playground UIEPSS 0.3%