CVE-2021-43857: Remote Code Execution in Gerapy
Summary
CVE-2021-43857: Gerapy is a distributed crawler management framework. Affects gerapy across 2 version ranges.
< 0.9.8
< 49bcb19be5e0320e7e1535f34fe00f16a3cf3b28
Fixed in 49bcb19be5e0320e7e1535f34fe00f16a3cf3b28. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Gerapy is a distributed crawler management framework that allows users to manage and monitor their web crawlers. It provides a range of features such as distributed task scheduling, web-based UI, and support for multiple crawler frameworks. However, versions prior to 0.9.8 of Gerapy are vulnerable to remote code execution.
Vulnerability Detail
The vulnerability in Gerapy allows an attacker to execute arbitrary code remotely. This can lead to various security risks, including unauthorized access, data breaches, and system compromise. The issue has been patched in version 0.9.8, which users should upgrade to immediately.
How To Fix
Latest published version: 0.9.13 as of 22 Oct 2026
pip install --upgrade "gerapy==0.9.13"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
49bcb19be5e0320e7e1535f34fe00f16a3cf3b28
This is the first release that contains the fix.
pip install --upgrade "gerapy==49bcb19be5e0320e7e1535f34fe00f16a3cf3b28"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Gerapy versions prior to 0.9.8 are vulnerable to remote code execution. Users should upgrade to version 0.9.8 or later to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for gerapy →
FAQ
Gerapy is a distributed crawler management framework that allows users to manage and monitor their web crawlers. It provides features such as distributed task scheduling, web-based UI, and support for multiple crawler frameworks.
The vulnerability in Gerapy allows an attacker to execute arbitrary code remotely. This can lead to unauthorized access, data breaches, and system compromise.
To fix the vulnerability, users should upgrade to Gerapy version 0.9.8 or later.
No, there are no known workarounds for this vulnerability. Upgrading to the patched version is the recommended solution.
You can find more information about this vulnerability in the Gerapy advisory database: [link to the advisory database]
Related vulnerabilities
Recent vulnerabilities recorded for gerapy.
