Firecrawl Firecrawl

• CVE-2026-116066 Medium 6.8 Firecrawl before 2.11.586 SSRF Protection Bypass via DNS Rebinding in Playwright Service 0.3%
• CVE-2026-72904 Critical 9.3 Firecrawl: Arbitrary file read via JSON Schema $ref expansion 0.5%
• CVE-2026-32857 High 8.6 Firecrawl Playwright Service SSRF Protection Bypass via Missing Post-Redirect Validation 0.4%
• CVE-2025-57818 Medium 6.3 Firecrawl SSRF Vulnerability via malicious webhook 0.3%