mirror of https://github.com/crewAIInc/crewAI.git synced 2026-07-03 06:08:15 +00:00

Files

Devin AI b4bc026c77 fix: add SSRF protection to FileUrl in crewai-files

- Add security.py module with DNS-resolving URL validation that blocks
  private/reserved IP ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16,
  127.0.0.0/8, 169.254.0.0/16, 0.0.0.0/32) and IPv6 equivalents
- Update FileUrl._validate_url() to use the new validate_url() function
- Disable follow_redirects in read()/aread() to prevent redirect-based SSRF
- Add CREWAI_FILES_ALLOW_UNSAFE_URLS env var escape hatch
- Add comprehensive tests for SSRF protection

Fixes #5843

Co-Authored-By: João <joao@crewai.com>

2026-05-18 00:55:14 +00:00

src/crewai_files

fix: add SSRF protection to FileUrl in crewai-files

2026-05-18 00:55:14 +00:00

tests

fix: add SSRF protection to FileUrl in crewai-files

2026-05-18 00:55:14 +00:00

pyproject.toml

chore: bump pypdf to 6.10.0 for GHSA-3crg-w4f6-42mx

2026-04-11 05:56:11 +08:00

README.md

feat: native multimodal file handling; openai responses api

2026-01-23 15:13:25 -05:00

README.md

crewai-files

File handling utilities for CrewAI multimodal inputs.

Supported File Types

ImageFile - PNG, JPEG, GIF, WebP
PDFFile - PDF documents
TextFile - Plain text files
AudioFile - MP3, WAV, FLAC, OGG, M4A
VideoFile - MP4, WebM, MOV, AVI

Usage

from crewai_files import File, ImageFile, PDFFile

# Auto-detect file type
file = File(source="document.pdf")  # Resolves to PDFFile

# Or use specific types
image = ImageFile(source="chart.png")
pdf = PDFFile(source="report.pdf")

Passing Files to Crews

crew.kickoff(
    input_files={"chart": ImageFile(source="chart.png")}
)

Passing Files to Tasks

task = Task(
    description="Analyze the chart",
    expected_output="Analysis",
    agent=agent,
    input_files=[ImageFile(source="chart.png")],
)