Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

unclecode/crawl4ai

              main @ 7e80152
            

Fixes

CVEs

CRITICAL

Peak severity

33.3%

Coverage

Highlights

Auth Bypass: 4 prior fixes. Scrutinize any change in this area.

deploy/docker/auth.py: most-fixed (3 issues). Treat as high-risk during review.

16 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Remote Code Execution: Hook execution uses exec() and allows __import__, enabling arbitrary code execution. Multiple fixes were needed, indicating incomplete sandboxing.

SSRF: Multiple SSRF fixes across crawl/md/llm endpoints and proxy settings show the URL validation is complex and easily bypassed (e.g., via IPv6-mapped addresses).

Auth Bypass: Weak default secret and missing enforcement when no token is provided allow unauthenticated access. One fix even made JWT optional, potentially weakening access control.