Ag UI AI Agent
by ag-ui-protocolAG-UI: the Agent-User Interaction Protocol. Bring Agents into Frontend Applications.
Ag UI is an open-source ai agent by ag-ui-protocol, written mainly in TypeScript, with 16,956 GitHub stars and the MIT license. Its code was last updated Oct 31, 2026.
Scan summary: scanned Nov 5, 2026 at commit d540f59. Seen able to run shell commands. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
d540f59 · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit2933 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.BuildfailFlagged. This check found an issue. See the findings below.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Network egresswarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (200)
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
apps/dojo/scripts/link-cpk.js:28 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
apps/dojo/scripts/prep-dojo-everything.js:46 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
apps/dojo/scripts/prep-dojo-everything.js:266 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
apps/dojo/scripts/run-dojo-everything.js:51 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
sdks/typescript/packages/cli/src/index.ts:94 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
sdks/typescript/scripts/create-integration.ts:85 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
sdks/typescript/scripts/create-integration.ts:215 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.axios@1.10.0: 64 known vulnerabilitiesGHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3w6x-2g7m-8v23, GHSA-42h9-826w-cgv3 +59 more
apps/dojo/e2e/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@9.0.1: 3 known vulnerabilitiesGHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq
apps/dojo/e2e/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.25.76: 5 known vulnerabilitiesGHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
apps/dojo/e2e/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.axios@1.9.0: 32 known vulnerabilitiesGHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3w6x-2g7m-8v23, GHSA-42h9-826w-cgv3 +27 more
apps/dojo/e2e/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.25.42: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
apps/dojo/e2e/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.adm-zip@0.5.16: 8 known vulnerabilitiesGHSA-7q85-xj36-vmfc, GHSA-8238-w5pm-2374, GHSA-c6fg-446q-cg94, GHSA-j5f4-cc29-5x44, GHSA-p634-w6r4-rjp2 +3 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.axios@1.13.2: 35 known vulnerabilitiesGHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3pq3-5fj3-cg6v, GHSA-3w6x-2g7m-8v23 +30 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.basic-ftp@5.2.0: 5 known vulnerabilitiesGHSA-6v7q-wjvx-w8wg, GHSA-c475-qrg2-pj4r, GHSA-chqc-8p9q-pq6q, GHSA-rp42-5vxx-qpwr, GHSA-rpmf-866q-6p89
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@1.20.1: 3 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-qwcr-r2fm-qrc7, GHSA-v422-hmwv-36x6
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.13: 6 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.engine.io@6.5.5: 2 known vulnerabilitiesGHSA-gr94-w7qr-f4j3, GHSA-r635-g3xr-vw7x
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.extract-zip@2.0.1: 4 known vulnerabilitiesGHSA-7pqw-9j4j-h8q3, GHSA-jmr9-qjv8-65gv, GHSA-7pqw-9j4j-h8q3, GHSA-jmr9-qjv8-65gv
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.1.0: 24 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +19 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.form-data@4.0.5: 1 known vulnerabilityGHSA-hmw2-7cc7-3qxx
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ip-address@10.1.0: 6 known vulnerabilitiesGHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@3.14.2: 8 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-2883-xcg3-v3hh +3 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.0: 15 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +10 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash@4.17.21: 4 known vulnerabilitiesGHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg, GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash@4.17.23: 2 known vulnerabilitiesGHSA-f23m-r3pf-42rh, GHSA-r5fr-rjxr-66jc
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@3.1.2: 6 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +1 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.11: 9 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w, GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8 +4 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.path-to-regexp@0.1.7: 2 known vulnerabilitiesGHSA-37ch-88jc-xwx2, GHSA-rhx6-c78j-4q9w
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.6: 12 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849, GHSA-6g55-p6wh-862q +7 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sharp@0.33.5: 6 known vulnerabilitiesGHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w, GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c +1 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.socket.io-parser@4.2.6: 1 known vulnerabilityGHSA-2m8v-j782-fhvr
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 3 known vulnerabilitiesGHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@11.1.0: 3 known vulnerabilitiesGHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.17.1: 4 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p, GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.18.3: 4 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p, GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.20.0: 2 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.21.4: 2 known vulnerabilitiesGHSA-m95q-7qp3-xv42, GHSA-mrhx-c7xc-m3w5
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.23.8: 2 known vulnerabilitiesGHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.24.0: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.axios@1.12.2: 64 known vulnerabilitiesGHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3w6x-2g7m-8v23, GHSA-42h9-826w-cgv3 +59 more
docs/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@1.20.3: 4 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6, GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
docs/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.12: 14 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +9 more
docs/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.0.2: 14 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +9 more
docs/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.engine.io@6.6.4: 3 known vulnerabilitiesGHSA-2gc4-cqfq-p2gv, GHSA-gr94-w7qr-f4j3, GHSA-r635-g3xr-vw7x
docs/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.form-data@4.0.4: 2 known vulnerabilitiesGHSA-hmw2-7cc7-3qxx, GHSA-hmw2-7cc7-3qxx
docs/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.glob@10.4.5: 2 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
docs/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ip-address@10.0.1: 6 known vulnerabilitiesGHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more
docs/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@3.14.1: 5 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m
docs/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@9.0.5: 8 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249, GHSA-23c5-xmqv-rm74 +3 more
docs/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.path-to-regexp@0.1.12: 2 known vulnerabilitiesGHSA-37ch-88jc-xwx2, GHSA-37ch-88jc-xwx2
docs/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@2.3.1: 4 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
docs/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.socket.io-parser@4.2.4: 2 known vulnerabilitiesGHSA-2m8v-j782-fhvr, GHSA-677m-j7p3-52f9
docs/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.aiohttp@3.14.1: 11 known vulnerabilitiesPYSEC-2026-3545, PYSEC-2026-3546, PYSEC-2026-3547, GHSA-2g87-pp6c-29x5, GHSA-494j-54xm-rwp3 +6 more
integrations/adk-middleware/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cryptography@48.0.1: 3 known vulnerabilitiesPYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554
integrations/adk-middleware/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.joserfc@1.7.1: 2 known vulnerabilitiesGHSA-9pg5-8c7x-5hfx, GHSA-jpxq-7h8p-2q76
integrations/adk-middleware/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyasn1@0.6.3: 21 known vulnerabilitiesPYSEC-2026-3455, PYSEC-2026-3456, PYSEC-2026-3457, GHSA-2qm8-x737-gmw5, GHSA-9m75-vc3g-4x39 +16 more
integrations/adk-middleware/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@1.2.1: 4 known vulnerabilitiesPYSEC-2026-248, PYSEC-2026-249, PYSEC-2026-248, PYSEC-2026-249
integrations/adk-middleware/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.7.0: 24 known vulnerabilitiesPYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177, PYSEC-2026-4175, PYSEC-2026-4176 +19 more
integrations/adk-middleware/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.black@26.3.1: 1 known vulnerabilityGHSA-cg8m-r9f2-5wm2
integrations/adk-middleware/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cryptography@46.0.7: 4 known vulnerabilitiesPYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554, GHSA-537c-gmf6-5ccf
integrations/adk-middleware/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httplib2@0.31.2: 3 known vulnerabilitiesPYSEC-2026-3444, PYSEC-2026-3444, PYSEC-2026-3444
integrations/adk-middleware/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.27.2: 10 known vulnerabilitiesPYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv, GHSA-rwrf-2pqf-9j8j, GHSA-w4fh-qvv9-3v23 +5 more
integrations/adk-middleware/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.22: 24 known vulnerabilitiesPYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038, PYSEC-2026-3039, PYSEC-2026-3040 +19 more
integrations/adk-middleware/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sqlparse@0.5.5: 5 known vulnerabilitiesPYSEC-2026-3696, PYSEC-2026-3697, PYSEC-2026-3698, PYSEC-2026-3699, PYSEC-2026-3923
integrations/adk-middleware/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.52.1: 40 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248, PYSEC-2026-249 +35 more
integrations/adk-middleware/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.6.3: 20 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-142, PYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177 +15 more
integrations/adk-middleware/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.aiohttp@3.14.3: 24 known vulnerabilitiesGHSA-2g87-pp6c-29x5, GHSA-494j-54xm-rwp3, GHSA-5wr8-gcqf-gqf3, GHSA-6cjc-53gc-5rqm, GHSA-9xw5-w5jj-pvcg +19 more
integrations/agent-spec/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@4.0.8: 14 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-6627-m3xw-93mp, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9c4x-gm8v-wgc4 +9 more
integrations/agent-spec/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.json-repair@0.44.1: 2 known vulnerabilitiesGHSA-xf7x-x43h-rpqh, GHSA-xf7x-x43h-rpqh
integrations/agent-spec/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.29.1: 4 known vulnerabilitiesGHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv, GHSA-rwrf-2pqf-9j8j, GHSA-w4fh-qvv9-3v23
integrations/agent-spec/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.aiohttp@3.14.0: 19 known vulnerabilitiesPYSEC-2026-2107, PYSEC-2026-2108, PYSEC-2026-2109, PYSEC-2026-2110, PYSEC-2026-2111 +14 more
integrations/agent-spec/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cryptography@48.0.0: 4 known vulnerabilitiesPYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554, GHSA-537c-gmf6-5ccf
integrations/agent-spec/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.29.1: 9 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9vhv-jxww-xfm5, GHSA-cwqr-hh33-gh44 +4 more
integrations/agent-spec/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fsspec@2026.4.0: 1 known vulnerabilityPYSEC-2026-4217
integrations/agent-spec/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph-sdk@0.4.2: 6 known vulnerabilitiesPYSEC-2026-4240, GHSA-3fx2-cqw9-xr3c, PYSEC-2026-4240, GHSA-3fx2-cqw9-xr3c, PYSEC-2026-4240 +1 more
integrations/agent-spec/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langsmith@0.8.9: 1 known vulnerabilityGHSA-f4xh-w4cj-qxq8
integrations/agent-spec/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.litellm@1.87.1: 2 known vulnerabilitiesPYSEC-2026-4066, GHSA-g5ff-637f-6q2m
integrations/agent-spec/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cryptography@49.0.0: 4 known vulnerabilitiesPYSEC-2026-3552, PYSEC-2026-3552, PYSEC-2026-3552, PYSEC-2026-3552
integrations/agno/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httpcore2@2.9.1: 2 known vulnerabilitiesPYSEC-2026-3844, PYSEC-2026-3844
integrations/antigravity/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httpx2@2.9.1: 10 known vulnerabilitiesPYSEC-2026-3845, PYSEC-2026-3846, PYSEC-2026-3847, PYSEC-2026-3848, PYSEC-2026-3849 +5 more
integrations/antigravity/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@2.0.0: 8 known vulnerabilitiesGHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv, GHSA-rwrf-2pqf-9j8j, GHSA-w4fh-qvv9-3v23, GHSA-5h93-6whr-6q8j +3 more
integrations/antigravity/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyasn1@0.6.4: 8 known vulnerabilitiesGHSA-2qm8-x737-gmw5, GHSA-9m75-vc3g-4x39, GHSA-fm9c-5rcf-2q5p, GHSA-mm57-4v3p-rchx, GHSA-2qm8-x737-gmw5 +3 more
integrations/antigravity/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.23.1: 7 known vulnerabilitiesPYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more
integrations/aws-strands/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.20: 14 known vulnerabilitiesPYSEC-2026-1852, PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038, PYSEC-2026-3039 +9 more
integrations/aws-strands/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.50.0: 10 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248, PYSEC-2026-249 +5 more
integrations/aws-strands/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.5.0: 12 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-1994, PYSEC-2026-1996, PYSEC-2026-1998, PYSEC-2026-4175 +7 more
integrations/aws-strands/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.26.0: 21 known vulnerabilitiesPYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +16 more
integrations/claude-agent-sdk/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.25.0: 7 known vulnerabilitiesPYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more
integrations/claude-agent-sdk/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.21: 7 known vulnerabilitiesPYSEC-2026-1852, PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038, PYSEC-2026-3039 +2 more
integrations/claude-agent-sdk/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@fastify/busboy@2.1.1: 2 known vulnerabilitiesGHSA-gxm5-99cw-xjw9, GHSA-x8mw-p69m-v3mx
integrations/community/cloudflare-agents/typescript/examples/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/client@2.0.0: 2 known vulnerabilitiesGHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h
integrations/community/cloudflare-agents/typescript/examples/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/sdk@1.30.0: 6 known vulnerabilitiesGHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
integrations/community/cloudflare-agents/typescript/examples/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/server@2.0.0: 4 known vulnerabilitiesGHSA-46jr-4wx8-v453, GHSA-f897-62hf-6gxq, GHSA-jm63-cq47-j5jp, GHSA-rvq5-wwqv-78pq
integrations/community/cloudflare-agents/typescript/examples/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@2.3.0: 1 known vulnerabilityGHSA-27r3-jxmh-p828
integrations/community/cloudflare-agents/typescript/examples/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sharp@0.35.4: 1 known vulnerabilityGHSA-wq5f-xc86-pv6w
integrations/community/cloudflare-agents/typescript/examples/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@5.29.0: 16 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52, GHSA-4992-7rv2-5pvq, GHSA-8xcm-r25x-g524 +11 more
integrations/community/cloudflare-agents/typescript/examples/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@7.29.1: 8 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-4w7w-5xrc-9h26, GHSA-55wc-3pg8-jfw6, GHSA-9fm3-97px-rjf6 +3 more
integrations/community/cloudflare-agents/typescript/examples/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.6.5: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
integrations/community/cloudflare-agents/typescript/examples/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/buger/jsonparser@1.1.1: 3 known vulnerabilitiesGO-2026-4514, GO-2026-4514, GO-2026-4514
integrations/community/genkit/go/examples/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/gofiber/fiber/v3@3.0.0-beta.3: 8 known vulnerabilitiesGO-2026-4534, GO-2026-4540, GO-2026-4543, GO-2026-5069, GO-2026-5585 +3 more
integrations/community/genkit/go/examples/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/klauspost/compress@1.17.11: 1 known vulnerabilityGO-2026-5841
integrations/community/genkit/go/examples/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.go.opentelemetry.io/otel@1.36.0: 2 known vulnerabilitiesGO-2026-5506, GO-2026-5506
integrations/community/genkit/go/examples/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.go.opentelemetry.io/otel/sdk@1.36.0: 6 known vulnerabilitiesGO-2026-4394, GO-2026-5426, GO-2026-6505, GO-2026-4394, GO-2026-5426 +1 more
integrations/community/genkit/go/examples/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.com.fasterxml.jackson.core:jackson-core@2.21.4: 16 known vulnerabilitiesGHSA-7hhh-6rmp-j9qf, GHSA-p6pp-m3f8-5c89, GHSA-7hhh-6rmp-j9qf, GHSA-p6pp-m3f8-5c89, GHSA-7hhh-6rmp-j9qf +11 more
integrations/community/spring-ai/java/examples/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.com.fasterxml.jackson.core:jackson-databind@2.21.4: 72 known vulnerabilitiesGHSA-5gvw-p9qm-jgwh, GHSA-5jmj-h7xm-6q6v, GHSA-cxp5-3px4-pw24, GHSA-gx83-3vf8-gh7j, GHSA-mhm7-754m-9p8w +67 more
integrations/community/spring-ai/java/examples/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.io.netty:netty-codec-compression@4.2.15.Final: 4 known vulnerabilitiesGHSA-558v-64gr-wgg4, GHSA-558v-64gr-wgg4, GHSA-558v-64gr-wgg4, GHSA-558v-64gr-wgg4
integrations/community/spring-ai/java/examples/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.io.netty:netty-codec-http@4.2.15.Final: 32 known vulnerabilitiesGHSA-4mp9-239f-g9hg, GHSA-6cqp-g7gg-8hr5, GHSA-6jqx-86gh-f27w, GHSA-8c42-7qj2-3j46, GHSA-gcjf-9mgh-3p7g +27 more
integrations/community/spring-ai/java/examples/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.io.netty:netty-codec-http2@4.2.15.Final: 8 known vulnerabilitiesGHSA-93wv-jw9v-4972, GHSA-c69g-56f8-xwqj, GHSA-93wv-jw9v-4972, GHSA-c69g-56f8-xwqj, GHSA-93wv-jw9v-4972 +3 more
integrations/community/spring-ai/java/examples/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.io.netty:netty-codec-http3@4.2.15.Final: 3 known vulnerabilitiesGHSA-hpcc-26xq-25fv, GHSA-hpcc-26xq-25fv, GHSA-hpcc-26xq-25fv
integrations/community/spring-ai/java/examples/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tools.jackson.core:jackson-core@3.1.4: 16 known vulnerabilitiesGHSA-7hhh-6rmp-j9qf, GHSA-p6pp-m3f8-5c89, GHSA-7hhh-6rmp-j9qf, GHSA-p6pp-m3f8-5c89, GHSA-7hhh-6rmp-j9qf +11 more
integrations/community/spring-ai/java/examples/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tools.jackson.core:jackson-databind@3.1.4: 56 known vulnerabilitiesGHSA-5gvw-p9qm-jgwh, GHSA-cxp5-3px4-pw24, GHSA-gx83-3vf8-gh7j, GHSA-q4xh-88c3-wmh7, GHSA-vvgp-rfg2-7rr6 +51 more
integrations/community/spring-ai/java/examples/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.32.3: 12 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-6627-m3xw-93mp, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9c4x-gm8v-wgc4 +7 more
integrations/crew-ai/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.28.1: 8 known vulnerabilitiesGHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv, GHSA-rwrf-2pqf-9j8j, GHSA-w4fh-qvv9-3v23, GHSA-5h93-6whr-6q8j +3 more
integrations/crew-ai/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.oauthlib@3.3.1: 16 known vulnerabilitiesPYSEC-2026-4113, PYSEC-2026-4114, GHSA-3jp2-3mrg-2vxc, GHSA-7984-qgvg-3j9c, PYSEC-2026-4113 +11 more
integrations/crew-ai/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.46.2: 28 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-1941, PYSEC-2026-1942, PYSEC-2026-2280, PYSEC-2026-2281 +23 more
integrations/crew-ai/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.32.0: 12 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-6627-m3xw-93mp, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9c4x-gm8v-wgc4 +7 more
integrations/crew-ai/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langchain-classic@1.0.0: 1 known vulnerabilityPYSEC-2026-2560
integrations/langgraph/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph-api@0.7.96: 3 known vulnerabilitiesPYSEC-2026-3857, PYSEC-2026-3858, GHSA-4hm6-w6qq-w73v
integrations/langgraph/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.protobuf@6.33.0: 1 known vulnerabilityPYSEC-2026-1805
integrations/langgraph/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyasn1@0.6.1: 18 known vulnerabilitiesPYSEC-2026-1810, PYSEC-2026-2263, PYSEC-2026-3455, PYSEC-2026-3456, PYSEC-2026-3457 +13 more
integrations/langgraph/python/examples/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langsmith@0.7.3: 3 known vulnerabilitiesPYSEC-2026-2582, PYSEC-2026-2583, GHSA-f4xh-w4cj-qxq8
integrations/langgraph/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langsmith@0.4.0: 4 known vulnerabilitiesGHSA-3644-q5cj-c5c7, GHSA-fw9q-39r9-c252, GHSA-rr7j-v2q5-chgv, GHSA-v34v-rq6j-cj6p
integrations/langgraph/typescript/examples/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@10.0.0: 2 known vulnerabilitiesGHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq
integrations/langgraph/typescript/examples/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.dnspython@2.8.0: 2 known vulnerabilitiesGHSA-45c3-73f7-pv4m, GHSA-45c3-73f7-pv4m
integrations/langroid/python/examples/uv.lock
Network activity
During install
github.comregistry.npmjs.orgrelease-assets.githubusercontent.comus.posthog.com
While running
Not run — the code wasn't started in this scan
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Ag UI alternatives
View more →Similar ai agents in Design & Media, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Ag UI (this page) ag-ui-protocol | 17k | MIT | Oct 31, 2026 | Scanned, no flagged issues |
| Taste Skill Leonxlnx | 107k | MIT | Oct 31, 2026 | Scanned, no flagged issues |
| Archify tt-a1i | 92k | Apache-2.0 | Oct 31, 2026 | Scanned, no flagged issues |
| Hyperframes heygen-com | 77k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| OpenMontage calesthio | 74k | AGPL-3.0 | Oct 28, 2026 | Scanned, no flagged issues |
| CopilotKit CopilotKit | 38k | MIT | Oct 31, 2026 | Scanned, no flagged issues |