joaomdmoura merged crewAIInc/crewAI#9146 · November 5, 2026 15:30 fix(deps): raise the oauthlib floor to 4.0.1 for CVE-2026-49272 #9146 pip-audit fails every PR on oauthlib==4.0.0: GHSA-3jp2-3mrg-2vxc / CVE-2026-49272 lets a client that knows a valid client ID get a bearer token in … +9 -8 1 comment