Skip to content

Vendor

crawlseo vulnerabilities

2 published CVES affecting crawlseo, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0
Atom feed of crawlseo alerts

Products

Latest crawlseo CVEs

Newest publication first

  1. CVE-2026-115400 crawlseo before 0.2.5 Cleartext Storage of Google OAuth Tokens

    Published
    MediumCVSS 6.7 EPSS 0.10%

    crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with database read access to obtain Google OAuth access and refresh tokens stored unencrypted in the User.googleTokens column. Attackers can read the plaintext long-lived refresh tokens...

  2. CVE-2026-115411 crawlseo before 0.2.4 Server-Side Request Forgery via Crawler

    Published
    MediumCVSS 5.3 EPSS 0.28%

    crawlseo before version 0.2.4 contains a server-side request forgery vulnerability in its crawler engine where isPrivateIp() fails to block reserved IP ranges such as RFC 6598 Carrier-Grade NAT, RFC 6890, TEST-NET ranges and certain IPv6 addresses, and additionally fails to pin t...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.