Veille CVE

Mardi 8 septembre 2026

1 CVE

  1. CVE-2026-37009 6.5 Moyenne

    A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an unsanitized sql_query argument.