Threats tagged 'ghsa-x35j-64g3-fxg7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-120630CrewAI contains an SSRF vulnerability caused by its SSRF guard and HTTP client, which both miss malicious content in High2026-11-02GCVE DatabaseCVE-2026-120630 CrewAI has a Server-Side Request Forgery (SSRF) vulnerability due to flaws in its SSRF guard and HTTP client. Both components fail to properly detect malicious content in URLs because they check opposite content, allowing attackers to inject malicious URLs. This vulnerability can be exploited by tools such as the ScrapWebsiteTool to perform SSRF attacks. Report on CVE-2026-120630 Vulnerability #ghsa-x35j-64g3-fxg7	GCVE Database	2026-11-02

Page 1 of 1