# unclecode/crawl4ai

Source: [GitHub](https://github.com/unclecode/crawl4ai)  
Feed7 permalink: https://feed7.dev/p/unclecode-crawl4ai-83d31714cc  
Published: 2026-08-30T00:00:00.000Z  
Trust: Needs Review (needs_review)

## Why Included

Update exposed Crawl4AI deployments: v0.9.2 fixes streaming leaks, while older releases had critical RCE, SSRF, and auth flaws.

## Source Summary

Crawl4AI turns browser-rendered pages into Markdown or structured data for agent and RAG pipelines. v0.9.2 fixes streaming leaks and deployment issues after two security-focused releases.

## Practical Implication

Builders using web retrieval should update rather than pinning older Docker images, keep API authentication enabled, and treat crawl requests as untrusted input. v0.9.0 made the Docker server secure by default, while crash recovery and prefetch support help longer jobs.

## Agent-Ready Context

Crawl4AI provides async browser crawling, Markdown generation, schema-based extraction, sessions, proxies, caching, deep crawls, and an MCP connection. **v0.9.2** fixes a streaming task/page leak plus Docker auth, packaging, and GPU-build issues.

Builders using web retrieval should update rather than pinning older Docker images, keep API authentication enabled, and treat crawl requests as untrusted input. **v0.9.0** made the Docker server secure by default, while crash recovery and prefetch support help longer jobs.

The broad feature set increases deployment and browser-state complexity. **v0.8.7** fixed critical RCE, SSRF, auth-bypass, file-write, XSS, and JWT-secret problems, so exposed legacy servers warrant particular scrutiny; the synchronous Selenium path is also deprecated.

## Context Map

- Layer: tools
- Domains: coding, data
- Topics: retrieval, mcp, tool-use

## Uncertainty

- Automatically selected from source material; feed7 has not independently tested the claim.

## Agent Instruction

Use this item as source-backed context. Do not invent claims beyond the linked source. If this item conflicts with another source, call out the conflict.