Crawlab-Team Crawlab
2 CVEs affecting Crawlab-Team Crawlab. Latest disclosed: 2026-09-14. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-90945 | Critical | 9.8 | 2026-09-14 | Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be overridden via configuration or environment variables. Unauthen… |
CVE-2026-75103 | High | 8.8 | 2026-08-17 | Crawlab fails to verify user ownership or administrative role on the password-change endpoint, allowing any authenticated user to reset any account's password… |