chat-with-mlx (>=0.1.0, <=0.1.11), crewai-files (>=1.9.0, <=1.10.1a1) +9 more potentially affected by CVE-2026-48156 via pypdf (4.0.2)

pypdf PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - chat-with-mlx =0.1.0, =1.9.0, =3.2.0, =1.2.1, =1.0.9, =0.0.0, =0.1.2, =0.73.0, =0.94.0 Source cves: CVE-2026-48156 Source advisory: OSV:PYSEC-2026-300...

crewai (>=0.61.0, <=0.70.1), giga-agent (>=0.1.3, <=0.1.9) +3 more potentially affected by CVE-2026-31241 via mem0ai (0.1.115)

mem0ai PYPI version 0.1.115 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - crewai =0.61.0, =0.1.3, =0.1.1, =0.1.1, =2.0.0 Source cves: CVE-2026-31241 Source advisory: OSV:PYSEC-2026-2634...

crewai (>=0.61.0, <=0.70.1), giga-agent (>=0.1.3, <=0.1.9) +3 more potentially affected by CVE-2026-31240 via mem0ai (0.1.115)

mem0ai PYPI version 0.1.115 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - crewai =0.61.0, =0.1.3, =0.1.1, =0.1.1, =2.0.0 Source cves: CVE-2026-31240 Source advisory: OSV:PYSEC-2026-2635...

crewai (>=0.61.0, <=0.70.1), giga-agent (>=0.1.3, <=0.1.9) +3 more potentially affected by CVE-2026-31245 via mem0ai (0.1.115)

mem0ai PYPI version 0.1.115 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - crewai =0.61.0, =0.1.3, =0.1.1, =0.1.1, =2.0.0 Source cves: CVE-2026-31245 Source advisory: OSV:PYSEC-2026-2633...

crewai (>=0.61.0, <=0.70.1), giga-agent (>=0.1.3, <=0.1.9) +3 more potentially affected by CVE-2026-7597 via mem0ai (0.1.115)

mem0ai PYPI version 0.1.115 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - crewai =0.61.0, =0.1.3, =0.1.1, =0.1.1, =2.0.0 Source cves: CVE-2026-7597 Source advisory: OSV:PYSEC-2026-2636...

chat-with-mlx (>=0.1.0, <=0.1.11), crewai-files (>=1.9.0, <=1.10.1a1) +9 more potentially affected by CVE-2026-41314 via pypdf (4.0.2)

pypdf PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - chat-with-mlx =0.1.0, =1.9.0, =3.2.0, =1.2.1, =1.0.9, =0.0.0, =0.1.2, =0.73.0, =0.94.0 Source cves: CVE-2026-41314 Source advisory: OSV:PYSEC-2026-302...

chat-with-mlx (>=0.1.0, <=0.1.11), crewai-files (>=1.9.0, <=1.10.1a1) +9 more potentially affected by CVE-2026-41313 via pypdf (4.0.2)

pypdf PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - chat-with-mlx =0.1.0, =1.9.0, =3.2.0, =1.2.1, =1.0.9, =0.0.0, =0.1.2, =0.73.0, =0.94.0 Source cves: CVE-2026-41313 Source advisory: OSV:PYSEC-2026-300...

chat-with-mlx (>=0.1.0, <=0.1.11), crewai-files (>=1.9.0, <=1.10.1a1) +9 more potentially affected by CVE-2026-28351 via pypdf (4.0.2)

pypdf PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - chat-with-mlx =0.1.0, =1.9.0, =3.2.0, =1.2.1, =1.0.9, =0.0.0, =0.1.2, =0.73.0, =0.94.0 Source cves: CVE-2026-28351 Source advisory: OSV:PYSEC-2026-301...

chat-with-mlx (>=0.1.0, <=0.1.11), crewai-files (>=1.9.0, <=1.10.1a1) +9 more potentially affected by CVE-2026-27628 via pypdf (4.0.2)

pypdf PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - chat-with-mlx =0.1.0, =1.9.0, =3.2.0, =1.2.1, =1.0.9, =0.0.0, =0.1.2, =0.73.0, =0.94.0 Source cves: CVE-2026-27628 Source advisory: OSV:PYSEC-2026-300...

chat-with-mlx (>=0.1.0, <=0.1.11), crewai-files (>=1.9.0, <=1.10.1a1) +9 more potentially affected by CVE-2026-27024 via pypdf (4.0.2)

pypdf PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - chat-with-mlx =0.1.0, =1.9.0, =3.2.0, =1.2.1, =1.0.9, =0.0.0, =0.1.2, =0.73.0, =0.94.0 Source cves: CVE-2026-27024 Source advisory: OSV:PYSEC-2026-301...

CVE-2026-62240: Server-Side Request Forgery (SSRF)

CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validateurl function that performs one-shot DNS resolution and blocklist checks before returning the original URL unchanged. Attackers can bypass the security filter by supplying URLs that redirect to internal...

cognee-integration-crewai (0.1.0) potentially affected by CVE-2026-58473 via cognee (0.3.4)

cognee PYPI version 0.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on cognee and may be impacted: - cognee-integration-crewai 0.1.0 Source cves: CVE-2026-58473 Source advisory: OSV:GHSA-49F7-WHX5-4256...

chat-with-mlx (>=0.1.0, <=0.1.11), crewai-files (>=1.9.0, <=1.10.1a1) +9 more potentially affected by CVE-2026-24688 via pypdf (4.0.2)

pypdf PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - chat-with-mlx =0.1.0, =1.9.0, =3.2.0, =1.2.1, =1.0.9, =0.0.0, =0.1.2, =0.73.0, =0.94.0 Source cves: CVE-2026-24688 Source advisory: OSV:PYSEC-2026-182...

chat-with-mlx (>=0.1.0, <=0.1.11), crewai-files (>=1.9.0, <=1.10.1a1) +9 more potentially affected by CVE-2025-66019 via pypdf (4.0.2)

pypdf PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - chat-with-mlx =0.1.0, =1.9.0, =3.2.0, =1.2.1, =1.0.9, =0.0.0, =0.1.2, =0.73.0, =0.94.0 Source cves: CVE-2025-66019 Source advisory: OSV:PYSEC-2026-183...

chat-with-mlx (>=0.1.0, <=0.1.11), crewai-files (>=1.9.0, <=1.10.1a1) +9 more potentially affected by CVE-2025-62707 via pypdf (4.0.2)

pypdf PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - chat-with-mlx =0.1.0, =1.9.0, =3.2.0, =1.2.1, =1.0.9, =0.0.0, =0.1.2, =0.73.0, =0.94.0 Source cves: CVE-2025-62707 Source advisory: OSV:PYSEC-2026-183...

composio-autogen (>=0.3.13, <=0.4.2), composio-camel (>=0.3.17, <=0.4.2) +11 more potentially affected by CVE-2024-8952 via composio-core (>=0.3.13, <=0.4.2)

composio-core PYPI version =0.3.13, =0.3.13, =0.3.17, =0.3.13, =0.3.13, =0.3.13, =0.3.13, =0.3.13, =0.3.24, =0.3.13, =0.3.13, =0.3.13, =0.3.24, =0.4.2 Source cves: CVE-2024-8952 Source advisory: OSV:PYSEC-2026-1267...

composio-autogen (>=0.3.13, <=0.4.4), composio-camel (>=0.3.17, <=0.4.4) +11 more potentially affected by CVE-2024-8955 via composio-core (>=0.3.13, <=0.4.4)

composio-core PYPI version =0.3.13, =0.3.13, =0.3.17, =0.3.13, =0.3.13, =0.3.13, =0.3.13, =0.3.13, =0.3.24, =0.3.13, =0.3.13, =0.3.13, =0.4.2, =0.3.24, =0.4.4 Source cves: CVE-2024-8955 Source advisory: OSV:PYSEC-2026-1263...

composio-autogen (>=0.3.13, <=0.5.42), composio-camel (>=0.3.17, <=0.5.42) +13 more potentially affected by CVE-2024-8953 via composio-core (>=0.3.13, <=0.5.42)

composio-core PYPI version =0.3.13, =0.3.13, =0.3.17, =0.3.13, =0.3.13, =0.5.26, =0.3.13, =0.3.13, =0.3.13, =0.3.24, =0.3.13, =0.3.13, =0.3.13, =0.4.2, =0.3.24, =0.2.31, =0.2.40 Source cves: CVE-2024-8953 Source advisory: OSV:PYSEC-2026-1264...

composio-autogen (>=0.3.13, <=0.5.6), composio-camel (>=0.3.17, <=0.5.6) +11 more potentially affected by CVE-2024-8864 via composio-core (>=0.3.13, <=0.5.6)

composio-core PYPI version =0.3.13, =0.3.13, =0.3.17, =0.3.13, =0.3.13, =0.3.13, =0.3.13, =0.3.13, =0.3.24, =0.3.13, =0.3.13, =0.3.13, =0.4.2, =0.3.24, =0.5.6 Source cves: CVE-2024-8864 Source advisory: OSV:PYSEC-2026-1266...

composio-autogen (>=0.3.13, <=0.5.8), composio-camel (>=0.3.17, <=0.5.8) +11 more potentially affected by CVE-2024-8865 via composio-core (>=0.3.13, <=0.5.8)

composio-core PYPI version =0.3.13, =0.3.13, =0.3.17, =0.3.13, =0.3.13, =0.3.13, =0.3.13, =0.3.13, =0.3.24, =0.3.13, =0.3.13, =0.3.13, =0.4.2, =0.3.24, =0.5.8 Source cves: CVE-2024-8865 Source advisory: OSV:PYSEC-2026-1265...