Security: firecrawl/firecrawl
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
-
Arbitrary file read via JSON Schema $ref expansionGHSA-3p54-jg6f-68r8 published
Jul 29, 2026 by mogeryHigh -
RCE via /scrape with changeTracking format's git-diff mode and an attacker-controlled websiteGHSA-7843-ffpq-5f9p published
Jul 29, 2026 by mogeryCritical -
SSRF Vulnerability via malicious webhookGHSA-p2wg-prhf-jx79 published
Aug 26, 2025 by mogeryHigh -
SSRF Vulnerability via malicious scrape targetGHSA-vjp8-2wgg-p734 published
Dec 30, 2024 by nickscamaraHigh
Learn more about advisories related to firecrawl/firecrawl in the GitHub Advisory Database