Cursor Agent d6e2af7077 fix(tools): pin SSRF fetches inside the outbound-fetch module ...

Close the DNS-rebinding gap on safe_get by resolving once, connecting to
that sockaddr, refusing proxies so the peer is the destination, and
checking getpeername. Keep that as an implementation detail of
safe_get/safe_get_bounded: one session per fetch, a create_connection
hook on the urllib3 connection class, no separate adapter module or
pool-manager subclass ladder.

RAG loader tests now patch safe_get (the public seam) instead of
requests.get.

Co-authored-by: Rip&Tear <theCyberTech@users.noreply.github.com>

2026-08-16 10:40:01 +00:00

..

cli

feat: bump versions to 1.15.16 (#6990)

2026-08-14 00:06:10 +00:00

crewai

fix: native tool calls broken over OpenAI Responses API (#6515)

2026-08-13 21:27:35 -04:00

crewai-core

feat: bump versions to 1.15.16 (#6990)

2026-08-14 00:06:10 +00:00

crewai-files

feat: bump versions to 1.15.16 (#6990)

2026-08-14 00:06:10 +00:00

crewai-tools

fix(tools): pin SSRF fetches inside the outbound-fetch module

2026-08-16 10:40:01 +00:00

devtools

feat: bump versions to 1.15.16 (#6990)

2026-08-14 00:06:10 +00:00