Read the docs

crawlseo

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

crawlseo records in CISA KEV

No crawlseo vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-79297 CVE-2026-115400 · GHSA-qcj9-c87v-pg2g

Cleartext storage of Google OAuth tokens in crawlseo

Priority LOW 28

crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with database read access to obtain Google OAuth access and refresh tokens stored unencrypted in the User.googleTokens column…

CVSS 4.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00104 Published 2026-10-22 Fixed in 0.2.5 CWE-312
TI-2026-79298 CVE-2026-115411 · GHSA-rvhf-6hhm-xg6w

crawlseo Server-Side Request Forgery via Crawler

Priority LOW 24

crawlseo before version 0.2.4 contains a server-side request forgery vulnerability in its crawler engine where isPrivateIp() fails to block reserved IP ranges such as RFC 6598 Carrier-Grade NAT, RFC 6890, TEST-NET ranges…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00282 Published 2026-10-22 Fixed in 0.2.4 CWE-918
Open these records in search →