Skip to content
CVE PROGRAM SOURCE RECORD2.3 Low

CVE-2026-46497

SSRF via sitemap-derived URLs in Crawlee for Python

Description

Crawlee is a web scraping and browser automation library. From version 1.0.0 to before version 1.7.0, Crawlee is vulnerable to SSRF via sitemap-derived URLs. This issue has been patched in version 1.7.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

apify crawlee-python

  • >= 1.0.0, < 1.7.0affected

References