{"data":{"ecosystem":"pypi","name":"crewai-tools","url":"https://aisecwatch.com/packages/pypi/crewai-tools","latestVersion":"1.15.26","firstReleaseAt":"2024-01-15T22:20:29.447Z","repository":"https://github.com/crewAIInc/crewAI","llm":{"exposure":"direct","depth":0,"integratedAt":"2024-01-15T22:20:29.447Z","integratedVersion":"0.0.1","sdks":["crewai"],"path":[]},"authority":{"profile":["browser","execution","http","mcp_tools"],"fromDependencies":["pypi:e2b","pypi:e2b-code-interpreter","pypi:mcp","pypi:playwright","pypi:requests","pypi:selenium"]},"dependencies":[{"ecosystem":"pypi","name":"bedrock-agentcore","versionSpec":"<2.0.0,>=1.18.1","scope":"extra:bedrock"},{"ecosystem":"pypi","name":"composio-core","versionSpec":">=0.6.11.post1","scope":"extra:composio-core"},{"ecosystem":"pypi","name":"crewai","versionSpec":"==1.15.26","scope":"runtime"},{"ecosystem":"pypi","name":"databricks-sdk","versionSpec":">=0.46.0","scope":"extra:databricks-sdk"},{"ecosystem":"pypi","name":"exa-py","versionSpec":">=1.8.7","scope":"extra:exa-py"},{"ecosystem":"pypi","name":"langchain-apify","versionSpec":"<1.0.0,>=0.1.2","scope":"extra:apify"},{"ecosystem":"pypi","name":"mcp","versionSpec":"<2,>=1.28.1","scope":"extra:mcp"},{"ecosystem":"pypi","name":"mcpadapt","versionSpec":">=0.1.9","scope":"extra:mcp"},{"ecosystem":"pypi","name":"qdrant-client","versionSpec":">=1.12.1","scope":"extra:qdrant-client"},{"ecosystem":"pypi","name":"unstructured","versionSpec":">=0.17.2","scope":"extra:xml"},{"ecosystem":"pypi","name":"weaviate-client","versionSpec":">=4.10.2","scope":"extra:weaviate-client"},{"ecosystem":"pypi","name":"beautifulsoup4","versionSpec":"<5,>=4.13.4","scope":"runtime"},{"ecosystem":"pypi","name":"browserbase","versionSpec":">=1.0.5","scope":"extra:browserbase"},{"ecosystem":"pypi","name":"contextual-client","versionSpec":">=0.1.0","scope":"extra:contextual"},{"ecosystem":"pypi","name":"couchbase","versionSpec":">=4.6.0","scope":"extra:couchbase"},{"ecosystem":"pypi","name":"cryptography","versionSpec":">=43.0.3","scope":"extra:snowflake"},{"ecosystem":"pypi","name":"daytona","versionSpec":"~=0.140.0","scope":"extra:daytona"},{"ecosystem":"pypi","name":"e2b","versionSpec":"~=2.20.0","scope":"extra:e2b"},{"ecosystem":"pypi","name":"e2b-code-interpreter","versionSpec":"~=2.6.0","scope":"extra:e2b"},{"ecosystem":"pypi","name":"firecrawl-py","versionSpec":">=1.8.0","scope":"extra:firecrawl-py"},{"ecosystem":"pypi","name":"gitpython","versionSpec":"<4,>=3.1.59","scope":"extra:github"},{"ecosystem":"pypi","name":"hyperbrowser","versionSpec":">=0.18.0","scope":"extra:hyperbrowser"},{"ecosystem":"pypi","name":"linkup-sdk","versionSpec":">=0.2.2","scope":"extra:linkup-sdk"},{"ecosystem":"pypi","name":"lxml","versionSpec":"<7,>=6.1.0","scope":"extra:rag"},{"ecosystem":"pypi","name":"multion","versionSpec":">=1.1.0","scope":"extra:multion"},{"ecosystem":"pypi","name":"nest-asyncio","versionSpec":">=1.6.0","scope":"extra:bedrock"},{"ecosystem":"pypi","name":"nltk","versionSpec":">=3.10.3","scope":"extra:xml"},{"ecosystem":"pypi","name":"oracledb","versionSpec":">=2.2.0","scope":"extra:oracledb"},{"ecosystem":"pypi","name":"oxylabs","versionSpec":"<4,>=2.0.0","scope":"extra:oxylabs"},{"ecosystem":"pypi","name":"patronus","versionSpec":">=0.0.16","scope":"extra:patronus"},{"ecosystem":"pypi","name":"playwright","versionSpec":">=1.52.0","scope":"extra:bedrock"},{"ecosystem":"pypi","name":"psycopg2-binary","versionSpec":">=2.9.10","scope":"extra:postgresql"},{"ecosystem":"pypi","name":"pygithub","versionSpec":"==1.59.1","scope":"extra:github"},{"ecosystem":"pypi","name":"pymongo","versionSpec":">=4.18.2","scope":"extra:mongodb"},{"ecosystem":"pypi","name":"pymupdf","versionSpec":"~=1.26.6","scope":"runtime"},{"ecosystem":"pypi","name":"pymysql","versionSpec":">=1.1.1","scope":"extra:mysql"},{"ecosystem":"pypi","name":"python-docx","versionSpec":"~=1.2.0","scope":"runtime"},{"ecosystem":"pypi","name":"pytube","versionSpec":"~=15.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"requests","versionSpec":"<3,>=2.33.0","scope":"runtime"},{"ecosystem":"pypi","name":"scrapegraph-py","versionSpec":"<2,>=1.9.0","scope":"extra:scrapegraph-py"},{"ecosystem":"pypi","name":"scrapfly-sdk","versionSpec":">=0.8.19","scope":"extra:scrapfly-sdk"},{"ecosystem":"pypi","name":"selenium","versionSpec":">=4.27.1","scope":"extra:selenium"},{"ecosystem":"pypi","name":"serpapi","versionSpec":">=0.1.5","scope":"extra:serpapi"},{"ecosystem":"pypi","name":"singlestoredb","versionSpec":">=1.12.4","scope":"extra:singlestore"},{"ecosystem":"pypi","name":"snowflake-connector-python","versionSpec":"<5,>=4.7.3","scope":"extra:snowflake"},{"ecosystem":"pypi","name":"snowflake-sqlalchemy","versionSpec":">=1.11.0","scope":"extra:snowflake"},{"ecosystem":"pypi","name":"spider-client","versionSpec":">=0.1.25","scope":"extra:spider-client"},{"ecosystem":"pypi","name":"sqlalchemy","versionSpec":">=2.0.40","scope":"extra:singlestore"},{"ecosystem":"pypi","name":"stagehand","versionSpec":">=0.4.1","scope":"extra:stagehand"},{"ecosystem":"pypi","name":"tavily-python","versionSpec":"~=0.7.14","scope":"extra:tavily-python"},{"ecosystem":"pypi","name":"tiktoken","versionSpec":"<0.13,>=0.8.0","scope":"runtime"},{"ecosystem":"pypi","name":"youtube-transcript-api","versionSpec":"~=1.2.2","scope":"runtime"}],"advisories":[{"id":"6bfe3ce4-b788-42f4-bcd0-d8fd389820dd","url":"https://aisecwatch.com/issues/6bfe3ce4-b788-42f4-bcd0-d8fd389820dd","cveId":"CVE-2026-62240","title":"CVE-2026-62240: CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs…","headline":"CrewAI server-side request forgery in validate_url via redirects","severity":"high","publishedAt":"2026-07-13T22:16:52.117Z","affected":["crewai-tools@< 1.15.1 (fixed: 1.15.1)"],"epssScore":0.0052,"matchedBy":"ecosystem"}],"checkedAt":"2026-10-09T21:51:23.347Z"},"meta":{"advisoryMatching":"by package name and ecosystem; an advisory with no ecosystem recorded for the package is matched by name alone"}}