Skip to content
OpenAdvisories

Package · PyPI

crewai-tools

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.4
    CVE-2026-62240

    CrewAI < 1.15.1 SSRF Filter Bypass via HTTP Redirect in Scrape Tools

    CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one-shot DNS resolution and blocklist checks before returning the original URL unchanged. Attackers can bypass the security filter by supplyin…

    crewAIInc crewAI crewai-tools PyPI