Apify - vulnerabilities (CVEs)

4 CVEs in 3 products, 0 in the last 30 days, newest from 2026-08-27.

Products

• Apify-mcp-server - 2 CVEs
• Actors-mcp-server - 1 CVEs
• Crawlee-python - 1 CVEs

Newest CVEs of Apify

• CVE-2026-81093 - CVSS 8.7 (high), 2026-08-27: The get-html-skeleton tool fetched a URL the caller supplied after checking only its syntax. The handler in src/tools/common/get_html_skeleton.ts validated…
• CVE-2026-50143 - CVSS 8.1 (high), 2026-08-18: The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store.…
• CVE-2026-46341 - CVSS 6.1 (medium), 2026-07-16: The Apify MCP server enables AI agents to extract data from websites using ready-made scrapers, crawlers, and automation tools available on the Apify Store.…
• CVE-2026-46497 - CVSS 2.3 (low), 2026-06-10: Crawlee is a web scraping and browser automation library. From version 1.0.0 to before version 1.7.0, Crawlee is vulnerable to SSRF via sitemap-derived URLs.…