Browse all 5 CVE security advisories affecting firecrawl. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-116066 | Firecrawl before 2.11.586 SSRF Protection Bypass via DNS Rebinding in Playwright Service — Firecrawl CWE-918 | 6.8 | Medium | 2026-10-25 |
| CVE-2026-85606 | firecrawl-mcp-server 3.20.2 Arbitrary Local File Read via filePath — firecrawl-mcp-server CWE-22 | 7.5 | High | 2026-09-04 |
| CVE-2026-72904 | Firecrawl: Arbitrary file read via JSON Schema $ref expansion — firecrawl CWE-77 | 9.3 | Critical | 2026-08-10 |
| CVE-2026-32857 | Firecrawl Playwright Service SSRF Protection Bypass via Missing Post-Redirect Validation — Firecrawl CWE-918 | 8.6 | High | 2026-03-26 |
| CVE-2025-57818 | Firecrawl SSRF Vulnerability via malicious webhook — firecrawl CWE-918 | 6.3 | Medium | 2025-08-26 |
This page lists every published CVE security advisory associated with firecrawl. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.