Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: crawlseo Clear all filters
TI-2026-79297 CVE-2026-115400 · GHSA-qcj9-c87v-pg2g

Cleartext storage of Google OAuth tokens in crawlseo

Priority LOW 28

crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with database read access to obtain Google OAuth access and refresh tokens stored unencrypted in the User.googleTokens column…

CVSS 4.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00104 Published 2026-10-22 Fixed in 0.2.5 CWE-312
TI-2026-79298 CVE-2026-115411 · GHSA-rvhf-6hhm-xg6w

crawlseo Server-Side Request Forgery via Crawler

Priority LOW 24

crawlseo before version 0.2.4 contains a server-side request forgery vulnerability in its crawler engine where isPrivateIp() fails to block reserved IP ranges such as RFC 6598 Carrier-Grade NAT, RFC 6890, TEST-NET ranges…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00282 Published 2026-10-22 Fixed in 0.2.4 CWE-918