crewAIInc
crewAIInc Security Releases - October 2026
crewaiinc-2026-10 Oct 1, 2026 Source: Vendor
crewAIInc security advisories for October 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-112308
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
2 lines
Showing 1–2 of 2
CVE-2026-112308
BR2026-0000-040213
crewai-tools
unclaimed
crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies the validate_url...
Credited as SashaMIT
CVE-2026-112308
BR2026-0000-040214
crewai-tools
unclaimed
crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies the validate_url...
Credited as Zachariah Mithani