Threats tagged 'ghsa-wh3g-v33g-c47f'

Crawl4AI versions before 0.9.5 have a denial of service vulnerability in the Docker API server. The vulnerability arises because the _clamp_untrusted() function does not properly limit certain delay parameters in untrusted CrawlerRunConfig inputs. This allows unauthenticated attackers to send excessively large values to specific endpoints, causing resource exhaustion and blocking other crawling operations.