S
Vendor security profile
scrapy
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical0
CISA KEV0
Public exploit0
Patch rate%25
Avg. CVSS7.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
1
1
1
CVE KEV
CVE severity distribution
4toplam CVE
High3 (75%)
Medium1 (25%)
Patch and exploitation view
%25
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
1Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
7.5
CVE-2026-105782
Scrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddleware
S
Patch status unknownEPSS %0
7.4
CVE-2026-84366
Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default
S
Patch status unknownEPSS %0
7.1
CVE-2026-55520
Protego: Exponential backtracking ReDoS in robots.txt URL wildcard matching
S
Partial patchEPSS %1