crewAI

mirror of https://github.com/crewAIInc/crewAI.git synced 2026-07-22 15:25:09 +00:00

Files

Cursor Agent 304e9ecbb3 fix(security): validate URLs before network requests in arxiv tool and devtools

Apply validate_url() before fetching the arXiv API and PyPI polling
endpoints. Replace urllib.request.urlopen with requests.get to satisfy
bandit S310 without noqa suppressions. Update arxiv tool tests to mock
requests.get and validate_url.

Co-authored-by: Rip&Tear <theCyberTech@users.noreply.github.com>

2026-07-13 05:54:29 +00:00

adapters

chore(crewai-tools): drop self-explanatory comments

2026-05-26 16:25:07 -07:00

cassettes/tools

feat: native multimodal file handling; openai responses api

2026-01-23 15:13:25 -05:00

rag

Fix SSRF redirect bypass in scraping fetches (#6331 )

2026-06-25 17:42:49 -07:00

tools

fix(security): validate URLs before network requests in arxiv tool and devtools