crawlab-team crawlab

• CVE-2026-90945 Critical 9.8 Crawlab through 0.6.3 Authentication Bypass via Hard-coded JWT Secret 0.8%
• CVE-2026-75103 High 8.8 Crawlab Missing Authorization on Password Change Endpoint Allows Account Takeover 0.6%