CVE-2026-105782 | Scrapy up to 2.14.1 RefererMiddleware referer.py code injection

October 6, 2026 Yanac

A vulnerability was found in Scrapy up to 2.14.1 and classified as problematic. Impacted is an unknown function of the file scrapy/spidermiddlewares/referer.py of the component RefererMiddleware. Such manipulation leads to code injection.

This vulnerability is listed as CVE-2026-105782. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More