VYPR

Crawl4AI/Chromium backend

by PraisonAI

CVEs (1)

  • CVE-2026-61429Jul 11, 2026
    risk 0.00cvss epss 0.00

    PraisonAI versions before 1.6.78 contain a server-side request forgery vulnerability in the Crawl4AI/Chromium backend that allows attackers to bypass SSRF validation by exploiting DNS rebinding and HTTP redirects. Attackers can craft URLs that resolve to internal services after…