repository icon
scrapy / scrapy Project repository

Scrapy, a fast high-level web crawling & scraping framework for Python.

Submit a report

FIRST INTERACTION

WITHIN13 DAYS

REVIEW

WITHIN61 DAYS

FIX

WITHIN125 DAYS

Arbitrary Code Execution via Untrusted Pickle Deserialization in Scrapy SpiderSt...
anotherik
pending
Brotli decompression bomb DoS
cycloctane
High
•CVE-2025-6176
Shell command injection in scrapy command
raj3shp
informative
High
User Defined Regex Without any proper validation
michealkeines
informative
Medium
Unhandled Exception in `Sitemap`
michealkeines
informative
Medium
Authorization header leakage on same-domain but cross-origin redirect
szarny
High
•$300•CVE-2024-1968
allowed_domains check bypass with http redirect
surayp
not applicable
local file read using redirect
ranjit-git
spam
Denial of Service when parsing downloaded XML content in XMLFeedSpider
nicecatch2000
High
•$750•CVE-2024-1892
Branch protection not enabled for the master branch
dmandefy
spam
Parsing XML content using insecure function
dmandefy
High
•$750•CVE-2024-3572
local file read using redirect
ranjit-git
not applicable
Authorization header leaked to third party site and it allow to hijack victim ac...
ranjit-git
High
•$900•CVE-2024-3574
Does not properly filter dangerous file types.
andy53
not applicable
OS Command Injection at Edit Spider
dwisiswant0
not applicable
Insecure temporary file creation
melbinkm
not applicable
Exposure of Sensitive Information to an Unauthorized Actor
ranjit-git
High
•$565•CVE-2022-0577