All 3 CVE vulnerabilities found in scrapy, with AI-generated Chinese analysis, references, and POCs.
Vendor: scrapy
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-105782 | Scrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddleware CWE-470 | 7.5 | High | 2026-10-05 |
| CVE-2026-84366 | Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default CWE-319 | 7.4 | High | 2026-09-01 |
| CVE-2021-41125 | HTTP authentication credential leak to target websites in scrapy CWE-200 | 5.7 | Medium | 2021-10-06 |
All 3 known CVE vulnerabilities affecting scrapy with full Chinese analysis, references, and POCs where available.