Apify

4 CVEs across 3 Apify products. Browse Apify vulnerabilities, severities, and proof-of-concept exploits.

Apify products with known CVEs

ProductCVEs
Apify-Mcp-Server2
Actors-Mcp-Server1
Crawlee-Python1
Apify CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-81093High8.62026-08-27The get-html-skeleton tool fetched a URL the caller supplied after checking only its syntax. The handler in src/tools/common/get_html_skeleton.ts validated the…
CVE-2026-50143High8.12026-08-18The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store. Pr…
CVE-2026-46341Medium6.12026-07-16The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store. Pr…
CVE-2026-464972026-06-10Crawlee is a web scraping and browser automation library. From version 1.0.0 to before version 1.7.0, Crawlee is vulnerable to SSRF via sitemap-derived URLs. T…