What is GHSA-445m-27cf-gr3x?

GHSA-445m-27cf-gr3x is a security advisory published by GitHub Security Advisories with Medium severity. Crawl4AI SSRF vulnerability

Which CVE IDs does GHSA-445m-27cf-gr3x cover?

GHSA-445m-27cf-gr3x covers the following CVE IDs: CVE-2025-28197. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-445m-27cf-gr3x?

GHSA-445m-27cf-gr3x affects 1 product, including: pip/Crawl4AI:\u003c= 0.4.247.

GHSA-445m-27cf-gr3xMedium

Crawl4AI SSRF vulnerability

Vendor

GitHub Security Advisories

Published

April 18, 2025

Last Modified

April 21, 2025

🔗 CVE IDs covered (1)

CVE-2025-28197 →

📋 Description

Crawl4AI <=0.4.247 is vulnerable to SSRF in /crawl4ai/async_dispatcher.py.

🎯 Affected products1

pip/Crawl4AI:<= 0.4.247

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-28197
https://gist.github.com/AndrewDzzz/f49e79b09ce0643ee1fc2a829e8875e0
https://github.com/advisories/GHSA-445m-27cf-gr3x