scrapy

Products

Exploited and recent CVEs

• CVE-2026-105782 High 7.5 Scrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddleware 0.4%
• CVE-2026-84366 High 7.4 Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default 0.3%
• CVE-2026-55520 High 7.1 Protego: Exponential backtracking ReDoS in robots.txt URL wildcard matching 0.5%
• CVE-2025-6176 High 7.5 Brotli decompression bomb DoS in scrapy/scrapy 0.5%
• CVE-2024-1968 High 7.5 Authorization Header Leakage in scrapy/scrapy on Scheme Change Redirects 0.7%
• CVE-2024-3574 High 7.5 Authorization Header Leak During Cross-Domain Redirect in scrapy/scrapy 0.6%
• CVE-2024-3572 High 7.5 XML External Entity (XXE) Vulnerability in scrapy/scrapy 0.8%
• CVE-2024-1892 High 7.5 ReDoS Vulnerability in scrapy/scrapy's XMLFeedSpider 0.6%
• CVE-2022-0577 High 8.8 Exposure of Sensitive Information to an Unauthorized Actor in scrapy/scrapy 1.2%
• CVE-2021-41125 Medium 5.7 HTTP authentication credential leak to target websites in scrapy 1.3%