Webrecorder vulnerabilities
We track 2 vulnerabilities in Webrecorder products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2026.
2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score
Latest Webrecorder vulnerabilities
- 9.4 Critical severity
Browsertrix is a high-fidelity, browser-based crawling service for web archiving that can be…
Browsertrix is a high-fidelity, browser-based crawling service for web archiving that can be self-hosted or used through Webrecorder's hosted instance. From 1.15.0 until 1.22.8, Browsertrix improperly sanitizes Git URLs specified as Custom Behaviors, allowing
- 7.1 High severity
wabac.js: Improper Neutralization of Input During Web Page Generation
wabac.js provides a full web archive replay system, or 'wayback machine', using Service Workers. A Reflected Cross-Site Scripting (XSS) vulnerability exists in the 404 error handling logic of wabac.js v2.23.10 and below. The parameter `requestURL` (derived fro