https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-26T19:57:59.385246+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-116066 fkie_cve-2026-116066 2026-10-26T19:57:59.387065+00:00

Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright service SSRF proxy that allows attackers to bypass isInternalHost checks via DNS rebinding. Attackers controlling DNS for a scrape target can return a public address during validation and a private address at connect time, retrieving cloud metadata and internal resources through the scrape API.

 https://db.gcve.eu/vuln/ghsa-xmmq-vp8j-m5qf GHSA-xmmq-vp8j-m5qf 2026-10-26T19:57:59.387157+00:00

Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright service SSRF proxy that allows attackers to bypass isInternalHost checks via DNS rebinding. Attackers controlling DNS for a scrape target can return a public address during validation and a private address at connect time, retrieving cloud metadata and internal resources through the scrape API.