Crawl4AI 0.9.3 is out. 🚀
Security release. Five advisories, reported privately and fixed before disclosure. Four in the PDF path, one in the Docker Playground.
SSRF through PDF redirects. Unbounded PDF downloads. Unescaped PDF text. File write from untrusted request bodies. DOM XSS in the Playground. All closed.
Plus 33 bug fixes since 0.9.2. PDF scraping works out of the box now.
pip install -U crawl4ai docker pull unclecode/crawl4ai:0.9.3
github.com/unclecode/craw…
Thank you to Jace Sun, Nguyen Tran Thanh Lam, and e1codes. Report it privately, we will treat it right.
Star the repo. A hosted version is coming.
Live long and import crawl4ai 🖖
Security release. Five advisories, reported privately and fixed before disclosure. Four in the PDF path, one in the Docker Playground.
SSRF through PDF redirects. Unbounded PDF downloads. Unescaped PDF text. File write from untrusted request bodies. DOM XSS in the Playground. All closed.
Plus 33 bug fixes since 0.9.2. PDF scraping works out of the box now.
pip install -U crawl4ai docker pull unclecode/crawl4ai:0.9.3
github.com/unclecode/craw…
Thank you to Jace Sun, Nguyen Tran Thanh Lam, and e1codes. Report it privately, we will treat it right.
Star the repo. A hosted version is coming.
Live long and import crawl4ai 🖖
github.com crawl4ai/docs/blog/release-v0.9.3.md at main · unclecode/crawl4ai Official Crawl4AI Cloud: a hosted web scraping, extraction, and search API for AI agents. Free API key, 1,000 credits a month, no card. Fully open source: this repo is the Apache-2.0 crawler that p... 
