scrapy CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH scrapy CVE published 2026-03-13

CVE-2026-105782

Scrapy vulnerability allows malicious sites to potentially terminate the process by exploiting the Referrer-Policy header. Upgrade to Scrapy 2.14.2 or later to patch. Affected deployments should assess exposure and prioritize upgrading to prevent potential process termination via Referrer-Policy header exploitation. The vulnerability exists in Scrapy versions 1.4.0 to 2.14.1 and involves importing and exe [truncated]