3 CVEs in 3 Webrecorder products, including Browsertrix, Pywb, Wabac.js. Newest: CVE-2026-54501 (2026-09-17). Severity, EPSS and public exploits for each.
Browsertrix is a high-fidelity, browser-based crawling service for web archiving that can be self-hosted or used through Webrecorder's hosted instance. From 1…
wabac.js provides a full web archive replay system, or 'wayback machine', using Service Workers. A Reflected Cross-Site Scripting (XSS) vulnerability exists in…