| react-profiling | 0 |
| react-import-map | react,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf |
| route-pattern | /:user_id/:repository/security(.:format) |
| route-controller | repos_security |
| route-action | overview |
| fetch-nonce | v2:3d2999bf-f98b-c433-2cd9-f41b74daaadb |
| current-catalog-service-hash | eb4da4203caf235b905c6dc3e430904a1aa33592def963430bc11b0a1c2beee4 |
| request-id | B8EE:39ED65:1E936:284AF:6AEBE13A |
| html-safe-nonce | 5b539b84f933de7a776c6d83e63ad4021fdbccd7174a343f32deed1eefa1ebae |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJCOEVFOjM5RUQ2NToxRTkzNjoyODRBRjo2QUVCRTEzQSIsInZpc2l0b3JfaWQiOiI3OTc1MzQ2NTI3NzQ1NTk3NzU0IiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0= |
| visitor-hmac | 116b8e69d0d7a63b2fad5621c312149ba39628a16682bc9bc135f1bfc6a5d08a |
| hovercard-subject-tag | repository:798201435 |
| github-keyboard-shortcuts | repository,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///repos/security/overview |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/unclecode/crawl4ai/security |
| og:site_name | GitHub |
| og:image | https://github.githubassets.com/assets/github-octocat-13c86b8b336d.png |
| og:image:type | image/png |
| og:image:width | 1200 |
| og:image:height | 620 |
| twitter:site:id | 13334762 |
| twitter:creator | github |
| twitter:creator:id | 13334762 |
| twitter:card | summary_large_image |
| twitter:image | https://github.githubassets.com/assets/github-logo-55c5b9a1fe52.png |
| twitter:image:width | 1200 |
| twitter:image:height | 1200 |
| hostname | github.com |
| expected-hostname | github.com |
| None | 701f7e3aecc56e7594e73fa7b7e1483af74322a67f7038be453d0feb05e86e77 |
| turbo-cache-control | no-preview |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 12d1048a3491dd63e4193b2937cf72f1c24a2a52 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/unclecode/crawl4ai/security#start-of-content |
| https://github.com/ |
| Sign in | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Funclecode%2Fcrawl4ai%2Fsecurity |
| GitHubRepository hosting, code review, and collaboration | https://github.com/platform |
| CopilotAI coding agent for tasks, projects and automated work | https://github.com/features/copilot |
| ActionsCI/CD and automation | https://github.com/features/actions |
| Code QualityQuality analysis, fixes, and enforcement | https://github.com/features/code-quality |
| CodespacesCloud development environments | https://github.com/features/codespaces |
| Code SecurityVulnerability detection and remediation | https://github.com/security/advanced-security/code-security |
| Secret ProtectionSecret scanning and leak prevention | https://github.com/security/advanced-security/secret-protection |
| All Features | https://github.com/features |
| Documentation | https://docs.github.com/en |
| Training | https://learn.github.com/skills |
| Certifications | https://learn.github.com/credentials |
| Build with Copilot | https://github.com/features/ai |
| Customize Copilot | https://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview |
| Integrations | https://github.com/marketplace |
| Trending repos | https://github.com/trending |
| GitHub Sponsors | https://github.com/open-source/sponsors |
| Developer articles | https://github.com/resources/articles |
| ChangelogYour source for the latest features, improvements, and fixes across GitHub products, all in one place. | https://github.blog/changelog/ |
| Enterprises | https://github.com/enterprise |
| Team | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| See all industries | https://github.com/solutions/industry |
| Why GitHub | https://github.com/why-github |
| Customer Stories | https://github.com/customer-stories |
| Business insights | https://github.com/solutions/executive-insights |
| Trust Center | https://github.com/trust-center |
| GitHub Advanced SecurityEnterprise-grade code security | https://github.com/security/advanced-security |
| Copilot for businessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/enterprise/premium-support |
| Documentation | https://docs.github.com/en |
| Resource center | https://github.com/resources |
| Blog | https://github.blog/ |
| Events & webinars | https://github.com/resources/events |
| Community Forum | https://github.com/orgs/community/discussions |
| Customer Stories | https://github.com/customer-stories |
| Integrations | https://github.com/marketplace |
| Customer support | https://help.github.com/ |
| Training | https://learn.github.com/skills |
| GitHub Status | https://www.githubstatus.com/ |
| About | https://github.com/about |
| Partners | https://github.com/partners |
| Changelog | https://github.blog/changelog/ |
| GitHub UniverseThe event for developers, by developers — talks, workshops, and what’s next for GitHub. | https://githubuniverse.com/ |
| Pricing | https://github.com/pricing |
| Sign in | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Funclecode%2Fcrawl4ai%2Fsecurity |
| Sign up | https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Frepos%2Fsecurity%2Foverview&source=header-repo&source_repo=unclecode%2Fcrawl4ai |
| Reload | https://github.com/unclecode/crawl4ai/security |
| Reload | https://github.com/unclecode/crawl4ai/security |
| Reload | https://github.com/unclecode/crawl4ai/security |
| unclecode | https://github.com/unclecode |
| crawl4ai | https://github.com/unclecode/crawl4ai |
| Code | https://github.com/unclecode/crawl4ai |
| Issues56 (56) | https://github.com/unclecode/crawl4ai/issues |
| Pull requests255 (255) | https://github.com/unclecode/crawl4ai/pulls |
| Discussions | https://github.com/unclecode/crawl4ai/discussions |
| Actions | https://github.com/unclecode/crawl4ai/actions |
| Projects | https://github.com/unclecode/crawl4ai/projects |
| Security and quality25 (25) | https://github.com/unclecode/crawl4ai/security |
| Insights | https://github.com/unclecode/crawl4ai/pulse |
| https://github.com/unclecode/crawl4ai/security#security-policy |
| https://github.com/unclecode/crawl4ai/security#supported-versions |
| https://github.com/unclecode/crawl4ai/security#reporting-a-vulnerability |
| https://github.com/unclecode/crawl4ai/security#how-to-report |
| Security Advisories | https://github.com/unclecode/crawl4ai/security/advisories |
| https://github.com/unclecode/crawl4ai/security#what-to-expect |
| https://github.com/unclecode/crawl4ai/security#disclosure-policy |
| https://github.com/unclecode/crawl4ai/security#security-best-practices-for-users |
| https://github.com/unclecode/crawl4ai/security#docker-api-deployment |
| https://github.com/unclecode/crawl4ai/security#library-usage |
| https://github.com/unclecode/crawl4ai/security#known-security-issues |
| Security Advisories | https://github.com/unclecode/crawl4ai/security/advisories |
| CHANGELOG.md | https://github.com/unclecode/crawl4ai/blob/main/CHANGELOG.md |
| SECURITY-CREDITS.md | https://github.com/unclecode/crawl4ai/blob/main/SECURITY-CREDITS.md |
| https://github.com/unclecode/crawl4ai/security#fixed-in-v095-2026-10-14 |
| https://github.com/unclecode/crawl4ai/security#fixed-in-v094-2026-09-23 |
| https://github.com/unclecode/crawl4ai/security#fixed-in-v093-2026-08-31 |
| https://github.com/unclecode/crawl4ai/security#fixed-in-v092-2026-07-15 |
| https://github.com/unclecode/crawl4ai/security#fixed-in-v091-2026-07-08 |
| https://github.com/unclecode/crawl4ai/security#fixed-in-v090-2026-06-18 |
| https://github.com/unclecode/crawl4ai/security#fixed-in-v089-2026-06-04 |
| https://github.com/unclecode/crawl4ai/security#fixed-in-v088-2026-06-04 |
| https://github.com/unclecode/crawl4ai/security#fixed-in-v087-2026-06-01 |
| https://github.com/unclecode/crawl4ai/security#fixed-in-v086-2026-03-24 |
| https://github.com/unclecode/crawl4ai/security#fixed-in-v085-2026-03-18 |
| https://github.com/unclecode/crawl4ai/security#fixed-in-v081-2026-01-30 |
| https://github.com/unclecode/crawl4ai/security#fixed-in-v080-2026-01-16 |
| https://github.com/unclecode/crawl4ai/security#security-features |
| https://github.com/unclecode/crawl4ai/security#v095 |
| https://github.com/unclecode/crawl4ai/security#v094 |
| https://github.com/unclecode/crawl4ai/security#v093 |
| https://github.com/unclecode/crawl4ai/security#v090-docker-api-server-secure-by-default |
| https://github.com/unclecode/crawl4ai/security#v087-to-v089-docker-api-server |
| https://github.com/unclecode/crawl4ai/security#v081 |
| https://github.com/unclecode/crawl4ai/security#v080 |
| https://github.com/unclecode/crawl4ai/security#acknowledgments |
| SECURITY-CREDITS.md | https://github.com/unclecode/crawl4ai/blob/main/SECURITY-CREDITS.md |
|
Chromium launched with --ignore-certificate-errors, so TLS verification is off on the Docker server
| https://github.com/unclecode/crawl4ai/security/advisories/GHSA-j2qh-f73r-mg3q |
| unclecode | https://github.com/unclecode |
|
Unbounded delay fields in untrusted CrawlerRunConfig bodies on the Docker server
| https://github.com/unclecode/crawl4ai/security/advisories/GHSA-rhjm-7hj7-75fx |
| unclecode | https://github.com/unclecode |
|
ReDoS via untrusted regex patterns freezes the Docker server
| https://github.com/unclecode/crawl4ai/security/advisories/GHSA-j843-8p47-rhxp |
| unclecode | https://github.com/unclecode |
|
Untrusted CosineStrategy model_name lets an API client choose the HuggingFace model the Docker server loads
| https://github.com/unclecode/crawl4ai/security/advisories/GHSA-f856-7xp9-w3cc |
| unclecode | https://github.com/unclecode |
|
JavaScript injection in the crawl page via untrusted css_selector and wait_for on the Docker server
| https://github.com/unclecode/crawl4ai/security/advisories/GHSA-qj46-wp7m-rgj8 |
| unclecode | https://github.com/unclecode |
|
Blind SSRF via CacheValidator freshness check bypasses the Docker server egress proxy
| https://github.com/unclecode/crawl4ai/security/advisories/GHSA-w4xc-px5p-c32w |
| unclecode | https://github.com/unclecode |
|
Untrusted-config gate bypass via dict-wrapper laundering leaks server env vars (LLM keys, SECRET_KEY)
| https://github.com/unclecode/crawl4ai/security/advisories/GHSA-5w5p-vcv6-mm3f |
| unclecode | https://github.com/unclecode |
|
SSRF with response disclosure via link_preview_config: the URL seeder fetches links outside the egress controls
| https://github.com/unclecode/crawl4ai/security/advisories/GHSA-wh5w-hmj3-vgg7 |
| unclecode | https://github.com/unclecode |
|
Blind SSRF via robots.txt fetch in RobotsParser.can_fetch bypasses the Docker server egress controls
| https://github.com/unclecode/crawl4ai/security/advisories/GHSA-f77g-77vp-r96v |
| unclecode | https://github.com/unclecode |
|
Arbitrary file write via unconfined PDFContentScrapingStrategy fields in untrusted config bodies
| https://github.com/unclecode/crawl4ai/security/advisories/GHSA-xpp7-j28w-2gvx |
| unclecode | https://github.com/unclecode |
| 1 | https://github.com/unclecode/crawl4ai/security?page=1 |
| 2 | https://github.com/unclecode/crawl4ai/security?page=2 |
| 3 | https://github.com/unclecode/crawl4ai/security?page=3 |
| Next | https://github.com/unclecode/crawl4ai/security?page=2 |
| GitHub Advisory Database | https://github.com/advisories |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |