scrapy scrapy/scrapy
6 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-6176 | unspecified – latest | Brotli decompression bomb DoS in scrapy/scrapy | HIGH 7.5 | 0.5 % | ||
| CVE-2024-1968 | unspecified – < 2.11.2 | Authorization Header Leakage in scrapy/scrapy on Scheme Change Redirects | HIGH 7.5 | 0.7 % | ||
| CVE-2024-3574 | unspecified – < 2.11.1 | Authorization Header Leak During Cross-Domain Redirect in scrapy/scrapy | HIGH 7.5 | 0.6 % | ||
| CVE-2024-3572 | unspecified – < 2.11.1 | XML External Entity (XXE) Vulnerability in scrapy/scrapy | HIGH 7.5 | 0.8 % | ||
| CVE-2024-1892 | unspecified – < 2.11 | ReDoS Vulnerability in scrapy/scrapy's XMLFeedSpider | HIGH 7.5 | 0.6 % | ||
| CVE-2022-0577 | unspecified – < 2.6.1 | Exposure of Sensitive Information to an Unauthorized Actor in scrapy/scrapy | HIGH 8.8 | 1.2 % |