Evidence · DiggingBeagle record
GHSA-f856-7xp9-w3cc: Crawl4AI untrusted extraction configuration could load arbitrary model artifacts
Primary upstream security advisory identifying affected configurations and patch 0.9.5.
- Source role
- primary disclosure
Evidence record
Primary upstream security advisory identifying affected configurations and patch 0.9.5.
Claim-level citations (1)
- supportsCrawl4AI untrusted extraction configuration could load arbitrary model artifacts: An API client could select the Hugging Face model loaded by the extraction service through CosineStrategy model_name.
Untrusted CosineStrategy model_name; fixed v0.9.5