CVE-2026-46497

CVE-2026-46497

Crawlee is a web scraping and browser automation library. From version 1.0.0 to before version 1.7.0, Crawlee is vulnerable to SSRF via sitemap-derived URLs. This issue has been patched in version 1.7.0.

Vulnerability class: SSRF (Server-Side Request Forgery)

Weakness classification (CWE)

References