Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

unclecode — Vulnerabilities & Security Advisories 23

Browse all 23 CVE security advisories affecting unclecode. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page provides a comprehensive aggregation of security vulnerabilities for the vendor unclecode, focusing on general software weakness classifications and associated risk tags. The collected data encompasses a wide spectrum of Common Weakness Enumeration (CWE) types, ranging from injection flaws and improper access control to buffer overflows and race conditions. The historical records span from the early days of the vendor's software releases through to the most recent disclosures, ensuring a complete timeline of security posture evolution. By examining these entries, security professionals can track the vendor's advisory history and observe patterns in how specific product lines have been affected over time. Users can also use this resource to understand the prevalence and impact of specific weakness classes within unclecode’s ecosystem, aiding in risk assessment and mitigation planning. This aggregation serves as a reference point for analyzing the consistency of security fixes and the responsiveness of the vendor to emerging threats. It allows researchers to correlate vulnerability types with specific product versions, providing insights into the development lifecycle’s security hygiene. The data is structured to facilitate deeper analysis of recurring issues and long-term remediation efforts. This page does not serve as an exhaustive list of every possible flaw but rather highlights the documented and disclosed instances that have been publicly acknowledged or patched. It is intended for use by security auditors, developers, and researchers who need to understand the historical context of security issues within this vendor’s portfolio. The information is presented to support informed decision-making regarding software procurement and maintenance.

Top products by unclecode: Crawl4AI
CVE ID Title CVSS Severity Published
CVE-2026-119122 Crawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness Check — crawl4ai CWE-918 5.3 Medium 2026-10-29
CVE-2026-119121 Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_for — crawl4ai CWE-95 4.3 Medium 2026-10-29
CVE-2026-119120 Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_name — crawl4ai CWE-502 7.5 High 2026-10-29
CVE-2026-119119 Crawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay Fields — crawl4ai CWE-770 7.5 High 2026-10-29
CVE-2026-119118 Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flags — crawl4ai CWE-295 6.5 Medium 2026-10-29
CVE-2026-115508 Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields — crawl4ai CWE-1333 6.5 Medium 2026-10-22
CVE-2026-112363 Crawl4AI 0.8.7 through 0.9.5 SSRF Bypass via SSLCertificate.from_url URL Userinfo — crawl4ai CWE-918 5.3 Medium 2026-10-19
CVE-2026-109239 Crawl4AI before 0.9.4 Blind SSRF via RobotsParser.can_fetch robots.txt Fetch — crawl4ai CWE-918 5.3 Medium 2026-10-12
CVE-2026-109238 Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seeder — crawl4ai CWE-918 8.6 High 2026-10-12
CVE-2026-109237 Crawl4AI 0.9.0 before 0.9.4 Untrusted Config Gate Bypass Leaks Environment Variables — crawl4ai CWE-502 8.1 High 2026-10-12
CVE-2026-91944 crawl4ai before 0.9.3 DOM-based XSS via Playground UI — crawl4ai CWE-79 6.1 Medium 2026-09-15
CVE-2026-91943 Crawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategy — crawl4ai CWE-918 7.7 High 2026-09-15
CVE-2026-91942 crawl4ai before 0.9.3 Cross-Site Scripting via innerHTML — crawl4ai CWE-79 5.4 Medium 2026-09-15
CVE-2026-91941 Crawl4AI before 0.9.3 Denial of Service via PDFContentScrapingStrategy — crawl4ai CWE-400 7.5 High 2026-09-15
CVE-2026-91940 crawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategy — crawl4ai CWE-22 7.5 High 2026-09-15
CVE-2026-57572 Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args — crawl4ai CWE-88 10.0 Critical 2026-07-06
CVE-2026-57573 Crawl4AI unauthenticated SSRF in Docker streaming crawl endpoint — crawl4ai CWE-918 8.6 High 2026-07-06
CVE-2026-57571 Crawl4AI arbitrary file write via download filename path traversal — crawl4ai CWE-22 9.6 Critical 2026-07-06
CVE-2026-53753 Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API — crawl4ai CWE-94 9.8 Critical 2026-06-23
CVE-2026-53754 Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped) — crawl4ai CWE-918 7.5 High 2026-06-23
CVE-2026-53755 Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check — crawl4ai CWE-918 8.6 High 2026-06-23
CVE-2026-26217 Crawl4AI < 0.8.0 Docker API Local File Inclusion via file URL Handling — Crawl4AI CWE-22 8.6 High 2026-02-12
CVE-2026-26216 Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter — Crawl4AI CWE-94 10.0 Critical 2026-02-12

This page lists every published CVE security advisory associated with unclecode. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.