CVE-2021-41124

CVE-2021-41124 is a high-severity information disclosure vulnerability affecting Scrapy-Splash versions prior to 0.8.0. It allows an attacker to obtain user credentials when HttpAuthMiddleware is used for Splash authentication, as non-Splash requests (including robots.txt) expose these credentials to the target. The CVSS score is 7.5, indicating a network-based attack with low complexity and high confidentiality impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.