Evidence · DiggingBeagle record
GHSA-qj46-wp7m-rgj8: Crawl4AI selector and wait expressions became executable browser JavaScript
Primary upstream security advisory identifying affected configurations and patch 0.9.5.
- Source role
- primary disclosure
Evidence record
Primary upstream security advisory identifying affected configurations and patch 0.9.5.
Claim-level citations (1)
- supportsCrawl4AI selector and wait expressions became executable browser JavaScript: Untrusted selector and wait parameters were interpreted as JavaScript in browser evaluation paths, despite separate rejection of direct js_code configuration.
css_selector and wait_for configuration; fixed v0.9.5