Evidence · DiggingBeagle record
GHSA-j843-8p47-rhxp: Crawl4AI untrusted regular expressions could block the Python service
Primary upstream security advisory identifying affected configurations and patch 0.9.5.
- Source role
- primary disclosure
Evidence record
Primary upstream security advisory identifying affected configurations and patch 0.9.5.
Claim-level citations (1)
- supportsCrawl4AI untrusted regular expressions could block the Python service: Untrusted extraction and chunking patterns allowed expensive regex matching that could trap the Python service even after the page-level timeout had elapsed.
Custom regex catastrophic backtracking; fixed v0.9.5