andre/crewAI
1
0
Fork 0
mirror of https://github.com/crewAIInc/crewAI.git synced 2026-07-08 08:25:09 +00:00
Code Issues Actions 6 Packages Projects Releases Wiki Activity

Potential fix for pull request finding

Browse Source 
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
This commit is contained in:
Rip&Tear
2026-06-24 18:43:12 +08:00
committed by GitHub
parent 7a39a3076e
commit ce53a34eea
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
lib/crewai-tools/src/crewai_tools/security/safe_requests.py
View File

@@ -48,8 +48,11 @@ def _assert_safe_peer(sock: Any) -> None:
return return
try: try:
peer = sock.getpeername() peer = sock.getpeername()
except OSError: except OSError as exc:
return raise ValueError(
"Unable to determine the connected peer address; blocking request to prevent SSRF. "
"Set CREWAI_TOOLS_ALLOW_UNSAFE_PATHS=true to bypass."
) from exc
ip_str = str(peer[0]) ip_str = str(peer[0])
if _is_private_or_reserved(ip_str): if _is_private_or_reserved(ip_str):
raise ValueError( raise ValueError(