p PatchFirst

CVE-2025-28197

CVE-2025-28197

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Crawl4AI <=0.4.247 is vulnerable to SSRF in /crawl4ai/async_dispatcher.py.

CVSS 9.1 · Critical · EPSS 0.4%

Published
Updated

Stack: python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • crawl4ai PyPI

    Versions
    • 0.3.0
    • 0.3.1
    • 0.3.2
    • 0.3.3
    • 0.3.4
    • 0.3.5
    • 0.3.6
    • 0.3.7
    • 0.3.71
    • 0.3.72
    • 0.3.73
    • 0.3.731
    • 0.3.74
    • 0.3.741
    • 0.3.742
    • 0.3.743
    • 0.3.744
    • 0.3.745
    • 0.3.746
    • 0.3.8
    • 0.4.0
    • 0.4.1
    • 0.4.21
    • 0.4.22
    • 0.4.23
    • 0.4.24
    • 0.4.241
    • 0.4.242
    • 0.4.243
    • 0.4.244
    • 0.4.245
    • 0.4.246
    • 0.4.247
    • 0.4.3b1
    • 0.4.3b2
    • 0.4.3b3
    Affected ranges
    • ECOSYSTEM: ≤ 0.4.247

    No fix published

Original sources

Check your server →