BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Unclecode

CVE-2026-115508: Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients t

CVE-2026-115508 Oct 22, 2026 Source: Vendor

Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unbounded regular expressions in /crawl request bodies. Attackers can submit catastrophic-backtracking patterns via RegexExtractionStrategy.custom, RegexChunking.patterns or JsonCss, JsonXPath and JsonLxml schema regex fields against a crafted page to freeze the entire server, including /health.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-115508
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

2 lines
All 2 CVEs 2 Additional recognition 0 Unclaimed only
Showing 1–2 of 2
CVE-2026-115508 BR2026-0000-031110 unclaimed
Credited as Zhixi Sun (manus-use)
CVE-2026-115508 BR2026-0000-031111 unclaimed
Credited as Siyang Wu