Beveiligingsadvies

CVE-2026-91942

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-15 15:18:02

Laatst bijgewerkt 2026-09-15 15:18:02

Toegewezen door VulnCheck

CVSS-score 5.4

Status PUBLISHED

Beschrijving

crawl4ai before 0.9.3 contains a DOM-based cross-site scripting vulnerability in the Docker Playground UI that assigns untrusted crawl results to element.innerHTML. Attackers can craft malicious PDFs with event-handler markup to execute JavaScript in the Playground origin and steal API tokens from sessionStorage for authenticated API abuse.

← Alle CVE's bekijken Bekijk op cve.org ↗