| Bug | bookworm | trixie | forky | sid | Description |
|---|
| TEMP-0000000-319406 | vulnerable | vulnerable | vulnerable | vulnerable | GHSA-q7wc-mr9r-gcjh: Link extractors and SitemapSpider follow file://, ftp:// and s3:// URLs from crawled content |
| TEMP-0000000-83D03D | vulnerable | vulnerable | fixed | fixed | GHSA-j72p-v7rm-cwm3 |
| TEMP-0000000-8EA0FC | vulnerable | vulnerable | fixed | fixed | GHSA-x3px-j3qh-fp5w |
| TEMP-0000000-4A6E51 | vulnerable | vulnerable | fixed | fixed | GHSA-fwm7-29m4-rrj9 |
| CVE-2026-105782 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | Scrapy is a high-level web crawling and scraping framework for Python. ... |
| CVE-2026-84366 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | Scrapy is a high-level web crawling and scraping framework for Python. ... |
| CVE-2024-3574 | vulnerable (no DSA) | fixed | fixed | fixed | In scrapy version 2.10.1, an issue was identified where the Authorizat ... |
| CVE-2024-3572 | vulnerable (no DSA) | fixed | fixed | fixed | The scrapy/scrapy project is vulnerable to XML External Entity (XXE) a ... |
| CVE-2024-1968 | vulnerable (no DSA) | fixed | fixed | fixed | In scrapy/scrapy, an issue was identified where the Authorization head ... |
| CVE-2024-1892 | vulnerable (no DSA) | fixed | fixed | fixed | A Regular Expression Denial of Service (ReDoS) vulnerability exists in ... |