Crawl4AI SSRF vulnerability
Date: 2025-04
Affected: pip/Crawl4AI
Attack vector: ssrf
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2025-28197
CWE: CWE-918

Crawl4AI <=0.4.247 is vulnerable to SSRF in /crawl4ai/async_dispatcher.py.


Mitigations:

Architectural layers (MAESTRO):