github-featured / unclecode--crawl4ai

发布

0 发布 61 Git 标签

RSS 订阅源
  • v0.9.3 4bcd5fa8a5
    比较

    v0.9.3: security release

    frostbyte_neo 发布于 2026-08-31 11:32:58 +00:00

    Closes five coordinated-disclosure advisories in the PDF processing path
    and the Docker Playground UI.

    GHSA-xpp7-j28w-2gvx arbitrary file write via PDF image-write fields
    GHSA-q5rj-45vw-vp2g SSRF, PDF fetch followed redirects unvalidated
    GHSA-v2rm-hvrj-2x9q DoS, unbounded PDF size and page count
    GHSA-7g3g-vhm6-79f3 XSS, PDF text unescaped into cleaned_html
    GHSA-m446-hp3q-qfxp DOM XSS in the playground, API token theft

    No new features. No breaking changes.

    下载附件