Jina-ai vulnerabilities
We track 3 vulnerabilities in Jina-ai products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 4, 2026.
Latest Jina-ai vulnerabilities
- 7.5 High severity
reader: Server-Side Request Forgery
jina-ai reader contains a server-side request forgery vulnerability where URL validation is performed only on the initial request but not re-applied to subsequent redirect hops. Attackers can craft a public URL that redirects to internal network addresses or c
- 7.5 High severity
reader: Server-Side Request Forgery
jina-ai reader disables its private-address guard outside Google Cloud deployments, allowing unauthenticated attackers to perform server-side request forgery. Attackers can supply publicly resolvable hostnames mapping to private addresses to retrieve cloud met
- 7.3 High severity
reader: Server-Side Request Forgery
A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue affects the function isValidTLD of the file /backend/functions/src/cloud-functions/crawler.ts of the component Crawler/Puppeteer. The manipu