Chroma AI Agent
by chroma-coreSearch infrastructure for AI
Chroma is an open-source ai agent by chroma-core, written mainly in Rust, with 29,616 GitHub stars and the Apache-2.0 license. Its code was last updated Oct 30, 2026.
Scan summary: scanned Nov 5, 2026 at commit 52ce844. Seen able to run shell commands, connect to the internet. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
52ce844 · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Passed. This check ran and found nothing it flags.Secrets scanpassPassed. This check ran and found nothing it flags.
Flagged. This check found an issue. See the findings below.Dependency audit929 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.BuildfailFlagged. This check found an issue. See the findings below.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Network egresswarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (200)
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
clients/new-js/packages/ai-embeddings/huggingface-server/jest.setup.ts:8 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
rust/js_bindings/index.js:20 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.aws-smithy-json@0.61.9: 1 known vulnerabilityGHSA-8ffr-xgwf-xj56
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.aws-smithy-json@0.62.5: 1 known vulnerabilityGHSA-8ffr-xgwf-xj56
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.libyml@0.0.5: 1 known vulnerabilityRUSTSEC-2025-0067
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pulldown-cmark@0.13.1: 2 known vulnerabilitiesRUSTSEC-2026-0414, RUSTSEC-2026-0433
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyo3@0.24.2: 2 known vulnerabilitiesRUSTSEC-2026-0176, RUSTSEC-2026-0177
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.quick-xml@0.38.4: 2 known vulnerabilitiesRUSTSEC-2026-0194, RUSTSEC-2026-0195
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.quick-xml@0.39.2: 2 known vulnerabilitiesRUSTSEC-2026-0194, RUSTSEC-2026-0195
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.quinn-proto@0.11.14: 5 known vulnerabilitiesRUSTSEC-2026-0185, RUSTSEC-2026-0338, RUSTSEC-2026-0339, RUSTSEC-2026-0340, RUSTSEC-2026-0342
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rmcp@1.8.0: 4 known vulnerabilitiesGHSA-33f5-2c5q-wgwj, GHSA-9g45-5xwm-f3wc, GHSA-9pj6-vhgr-3mwh, GHSA-c9xm-49cp-xcr9
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rustls-webpki@0.101.7: 4 known vulnerabilitiesRUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104, RUSTSEC-2026-0382
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rustls-webpki@0.103.9: 5 known vulnerabilitiesRUSTSEC-2026-0049, RUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104, RUSTSEC-2026-0382
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.thrift@0.17.0: 1 known vulnerabilityRUSTSEC-2026-0435
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.axios@0.26.1: 23 known vulnerabilitiesGHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-43fc-jf86-j433, GHSA-5c9x-8gcm-mpgx, GHSA-62hf-57xw-28j9 +18 more
clients/js/examples/node/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@1.20.2: 3 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-qwcr-r2fm-qrc7, GHSA-v422-hmwv-36x6
clients/js/examples/node/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.path-to-regexp@0.1.7: 2 known vulnerabilitiesGHSA-37ch-88jc-xwx2, GHSA-rhx6-c78j-4q9w
clients/js/examples/node/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sharp@0.32.6: 6 known vulnerabilitiesGHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w, GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c +1 more
clients/js/examples/node/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tar-fs@2.1.1: 3 known vulnerabilitiesGHSA-8cj5-5rvv-wf4v, GHSA-pq67-2wwv-3xjx, GHSA-vj76-c3g6-qr5v
clients/js/examples/node/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tar-fs@3.0.6: 6 known vulnerabilitiesGHSA-8cj5-5rvv-wf4v, GHSA-pq67-2wwv-3xjx, GHSA-vj76-c3g6-qr5v, GHSA-8cj5-5rvv-wf4v, GHSA-pq67-2wwv-3xjx +1 more
clients/js/examples/node/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.11: 24 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +19 more
clients/js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.0.1: 16 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +11 more
clients/js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.23.1: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
clients/js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cross-spawn@6.0.5: 1 known vulnerabilityGHSA-3xgq-45jj-v275
clients/js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cross-spawn@7.0.3: 1 known vulnerabilityGHSA-3xgq-45jj-v275
clients/js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.glob@10.4.1: 2 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
clients/js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@3.14.1: 15 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +10 more
clients/js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.0: 10 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +5 more
clients/js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash@4.17.21: 8 known vulnerabilitiesGHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg, GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg, GHSA-r5fr-rjxr-66jc +3 more
clients/js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@3.1.2: 12 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +7 more
clients/js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@5.1.6: 9 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +4 more
clients/js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@9.0.4: 4 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
clients/js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.8: 3 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
clients/js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@2.3.1: 8 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p +3 more
clients/js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.3: 8 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849, GHSA-6g55-p6wh-862q +3 more
clients/js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rollup@4.18.0: 2 known vulnerabilitiesGHSA-gcx4-mw62-g8wm, GHSA-mw96-cpmx-2vgc
clients/js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 3 known vulnerabilitiesGHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
clients/js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tar-fs@2.0.1: 3 known vulnerabilitiesGHSA-8cj5-5rvv-wf4v, GHSA-pq67-2wwv-3xjx, GHSA-vj76-c3g6-qr5v
clients/js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tmp@0.2.3: 4 known vulnerabilitiesGHSA-52f5-9888-hmc6, GHSA-ph9p-34f9-6g65, GHSA-52f5-9888-hmc6, GHSA-ph9p-34f9-6g65
clients/js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@9.0.1: 3 known vulnerabilitiesGHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq
clients/js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@fastify/busboy@2.1.1: 4 known vulnerabilitiesGHSA-gxm5-99cw-xjw9, GHSA-x8mw-p69m-v3mx, GHSA-gxm5-99cw-xjw9, GHSA-x8mw-p69m-v3mx
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@grpc/grpc-js@1.13.3: 4 known vulnerabilitiesGHSA-5375-pq7m-f5r2, GHSA-99f4-grh7-6pcq, GHSA-f596-whhp-79r4, GHSA-m9gg-hp2v-232j
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.axios@1.9.0: 32 known vulnerabilitiesGHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3w6x-2g7m-8v23, GHSA-42h9-826w-cgv3 +27 more
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.24.5: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.defu@6.1.4: 1 known vulnerabilityGHSA-737v-mqg7-c878
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.0.6: 12 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.glob@10.4.5: 2 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.joi@17.13.3: 6 known vulnerabilitiesGHSA-4528-x5fx-h6hg, GHSA-6h2x-m376-mqjq, GHSA-6w3j-5fw6-r9vr, GHSA-gg4h-3hg2-grpc, GHSA-q7cg-457f-vx79 +1 more
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.jws@4.0.0: 1 known vulnerabilityGHSA-869p-cjfg-cm3x
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@9.0.5: 8 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249, GHSA-23c5-xmqv-rm74 +3 more
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.11: 6 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w, GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8 +1 more
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@4.0.2: 4 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rollup@4.40.2: 1 known vulnerabilityGHSA-mw96-cpmx-2vgc
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sharp@0.34.1: 3 known vulnerabilitiesGHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tar-fs@2.1.2: 2 known vulnerabilitiesGHSA-8cj5-5rvv-wf4v, GHSA-vj76-c3g6-qr5v
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tar-fs@3.0.8: 2 known vulnerabilitiesGHSA-8cj5-5rvv-wf4v, GHSA-vj76-c3g6-qr5v
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.thrift@0.11.0: 4 known vulnerabilitiesGHSA-526f-jxpj-jmg2, GHSA-r67j-r569-jrwp, GHSA-526f-jxpj-jmg2, GHSA-r67j-r569-jrwp
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@5.29.0: 32 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52, GHSA-4992-7rv2-5pvq, GHSA-8xcm-r25x-g524 +27 more
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@10.0.0: 2 known vulnerabilitiesGHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.18.2: 2 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.24.4: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
clients/new-js/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.orjson@3.9.15: 4 known vulnerabilitiesPYSEC-2026-107, PYSEC-2026-107, PYSEC-2026-107, PYSEC-2026-107
clients/python/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.grpcio@1.9.1: 1 known vulnerabilityPYSEC-2026-1424
clients/python/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fastapi@0.99.1: 1 known vulnerabilityPYSEC-2024-38
clients/python/requirements_dev.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.27.0: 7 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-1941, PYSEC-2026-1943, PYSEC-2026-2280, PYSEC-2026-2281 +2 more
clients/python/requirements_dev.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httpcore2@2.9.1: 3 known vulnerabilitiesPYSEC-2026-3844, PYSEC-2026-3844, PYSEC-2026-3844
examples/chat_with_your_documents/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httpx2@2.9.1: 15 known vulnerabilitiesPYSEC-2026-3845, PYSEC-2026-3846, PYSEC-2026-3847, PYSEC-2026-3848, PYSEC-2026-3849 +10 more
examples/chat_with_your_documents/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.requests@2.9.2: 15 known vulnerabilitiesPYSEC-2018-28, PYSEC-2023-74, PYSEC-2026-1872, PYSEC-2026-1873, PYSEC-2026-2275 +10 more
examples/chat_with_your_documents/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/containerd/containerd@1.7.12: 12 known vulnerabilitiesGO-2025-3528, GO-2025-4100, GO-2025-4108, GO-2026-5064, GO-2026-5338 +7 more
go/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/docker/docker@25.0.6+incompatible: 6 known vulnerabilitiesGO-2025-3829, GO-2026-4883, GO-2026-4887, GO-2026-5617, GO-2026-5668 +1 more
go/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/klauspost/compress@1.16.0: 1 known vulnerabilityGO-2026-5841
go/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.go.opentelemetry.io/otel@1.36.0: 1 known vulnerabilityGO-2026-5506
go/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.go.opentelemetry.io/otel/sdk@1.28.0: 4 known vulnerabilitiesGO-2026-4394, GO-2026-5426, GO-2026-6505, GO-2026-6616
go/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.golang.org/x/oauth2@0.20.0: 1 known vulnerabilityGO-2025-3488
go/go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.protobuf@5.28.0: 2 known vulnerabilitiesPYSEC-2026-1805, PYSEC-2026-1806
requirements_dev.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.setuptools@9.1.0: 4 known vulnerabilitiesPYSEC-2022-43012, PYSEC-2025-49, PYSEC-2026-1918, PYSEC-2026-3447
requirements_dev.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@grpc/grpc-js@1.14.3: 4 known vulnerabilitiesGHSA-5375-pq7m-f5r2, GHSA-99f4-grh7-6pcq, GHSA-f596-whhp-79r4, GHSA-m9gg-hp2v-232j
sample_apps/movies/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.axios@1.13.2: 35 known vulnerabilitiesGHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3pq3-5fj3-cg6v, GHSA-3w6x-2g7m-8v23 +30 more
sample_apps/movies/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.12: 7 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
sample_apps/movies/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.0.2: 7 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
sample_apps/movies/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.28.1: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
sample_apps/movies/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.1.0: 12 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
sample_apps/movies/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.flatted@3.3.3: 2 known vulnerabilitiesGHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
sample_apps/movies/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.form-data@4.0.5: 1 known vulnerabilityGHSA-hmw2-7cc7-3qxx
sample_apps/movies/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.1: 4 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
sample_apps/movies/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@4.0.3: 2 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
sample_apps/movies/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.4.31: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
sample_apps/movies/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.6: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
sample_apps/movies/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sharp@0.34.5: 3 known vulnerabilitiesGHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
sample_apps/movies/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tmp@0.2.5: 1 known vulnerabilityGHSA-ph9p-34f9-6g65
sample_apps/movies/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.18.3: 2 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
sample_apps/movies/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.25.76: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
sample_apps/movies/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Install or build failed in a clean environmentstrip=symbols"` Error: command ['maturin', 'pep517', 'build-wheel', '-i', '/tmp/home/.cache/uv/builds-v0/.tmp5mmIWa/bin/python', '--compatibility', 'off', '--editable'] returned non-zero exit status 1 hint: Build failures usually indicate a problem with the package or the build environment
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Install contacted hosts other than package registriesstatic.rust-lang.org
- lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
docs/mintlify/docs.json:517 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key2 matches in this file
go/pkg/sysdb/metastore/db/dao/collection_test.go:536 - lowLow. Minor, or common in normal tools. Shown for information.anyhow@1.0.102: 1 known vulnerabilityRUSTSEC-2026-0190
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.arrow-data@55.2.0: 1 known vulnerabilityRUSTSEC-2026-0442
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.backoff@0.4.0: 1 known vulnerabilityRUSTSEC-2025-0012
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.bincode@1.3.3: 1 known vulnerabilityRUSTSEC-2025-0141
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.crossbeam-epoch@0.9.18: 1 known vulnerabilityRUSTSEC-2026-0204
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.crypto-bigint@0.4.9: 1 known vulnerabilityRUSTSEC-2026-0387
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.crypto-bigint@0.5.5: 1 known vulnerabilityRUSTSEC-2026-0387
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.cxx@1.0.194: 1 known vulnerabilityRUSTSEC-2026-0202
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.derivative@2.2.0: 1 known vulnerabilityRUSTSEC-2024-0388
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.event-listener@5.4.1: 1 known vulnerabilityRUSTSEC-2026-0221
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.h2@0.3.27: 1 known vulnerabilityRUSTSEC-2026-0258
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.h2@0.4.13: 1 known vulnerabilityRUSTSEC-2026-0258
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.instant@0.1.13: 1 known vulnerabilityRUSTSEC-2024-0384
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.lru@0.12.5: 2 known vulnerabilitiesRUSTSEC-2026-0002, RUSTSEC-2026-0253
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.memmap2@0.9.10: 1 known vulnerabilityRUSTSEC-2026-0186
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.number_prefix@0.4.0: 1 known vulnerabilityRUSTSEC-2025-0119
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.openssl@0.10.79: 1 known vulnerabilityGHSA-phqj-4mhp-q6mq
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry_sdk@0.27.1: 1 known vulnerabilityGHSA-w9wp-h8wv-79jx
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.paste@1.0.15: 1 known vulnerabilityRUSTSEC-2024-0436
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.pin-utils@0.1.0: 1 known vulnerabilityRUSTSEC-2026-0441
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rand@0.10.0: 1 known vulnerabilityRUSTSEC-2026-0097
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rand@0.8.5: 1 known vulnerabilityRUSTSEC-2026-0097
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rand@0.9.2: 1 known vulnerabilityRUSTSEC-2026-0097
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rsa@0.9.10: 1 known vulnerabilityRUSTSEC-2023-0071
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rtrb@0.3.3: 1 known vulnerabilityRUSTSEC-2026-0274
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustls@0.21.12: 3 known vulnerabilitiesRUSTSEC-2026-0346, RUSTSEC-2026-0349, GHSA-h2v8-394m-p7vv
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustls@0.23.37: 4 known vulnerabilitiesRUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0348, RUSTSEC-2026-0349
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustls-pemfile@1.0.4: 1 known vulnerabilityRUSTSEC-2025-0134
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustls-pemfile@2.2.0: 1 known vulnerabilityRUSTSEC-2025-0134
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.scc@2.4.0: 1 known vulnerabilityRUSTSEC-2026-0205
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.serde_yml@0.0.12: 1 known vulnerabilityRUSTSEC-2025-0068
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.tokio@1.50.0: 1 known vulnerabilityRUSTSEC-2026-0386
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.unsafe-libyaml@0.2.11: 1 known vulnerabilityRUSTSEC-2024-0449
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.webbrowser@1.2.0: 1 known vulnerabilityRUSTSEC-2026-0257
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.webpki-root-certs@1.0.6: 1 known vulnerabilityRUSTSEC-2026-0383
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.webpki-roots@1.0.6: 1 known vulnerabilityRUSTSEC-2026-0381
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zip-extract@0.2.3: 1 known vulnerabilityRUSTSEC-2025-0172
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zstd@0.13.3: 1 known vulnerabilityRUSTSEC-2026-0391
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zstd-safe@7.2.4: 12 known vulnerabilitiesRUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399 +7 more
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zstd-sys@2.0.16+zstd.1.5.7: 1 known vulnerabilityRUSTSEC-2026-0410
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.@protobufjs/utf8@1.1.0: 4 known vulnerabilitiesGHSA-q6x5-8v7m-xcrf, GHSA-q6x5-8v7m-xcrf, GHSA-q6x5-8v7m-xcrf, GHSA-q6x5-8v7m-xcrf
clients/js/examples/node/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.cookie@0.6.0: 1 known vulnerabilityGHSA-pxg6-pf52-xh8x
clients/js/examples/node/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.express@4.19.2: 1 known vulnerabilityGHSA-qw6h-vgh9-j6wx
clients/js/examples/node/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.follow-redirects@1.15.6: 1 known vulnerabilityGHSA-r4q5-vmmm-2653
clients/js/examples/node/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.qs@6.11.0: 4 known vulnerabilitiesGHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-w7fw-mjwx-w883
clients/js/examples/node/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.send@0.18.0: 1 known vulnerabilityGHSA-m6fv-jmcg-4jfg
clients/js/examples/node/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.serve-static@1.15.0: 1 known vulnerabilityGHSA-cm22-4g7w-348p
clients/js/examples/node/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.24.7: 1 known vulnerabilityGHSA-4x5r-pxfx-6jf8
clients/js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@babel/helpers@7.24.7: 1 known vulnerabilityGHSA-968p-4wvh-cqc8
clients/js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@smithy/config-resolver@3.0.2: 1 known vulnerabilityGHSA-6475-r3vj-m8vf
clients/js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.ajv@8.16.0: 1 known vulnerabilityGHSA-2g4f-4pwh-qvx6
clients/js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.deepmerge@4.3.1: 2 known vulnerabilitiesGHSA-gcqx-w48m-w2h4, GHSA-gcqx-w48m-w2h4
clients/js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.diff@4.0.2: 2 known vulnerabilitiesGHSA-73rr-hh4g-fpgx, GHSA-73rr-hh4g-fpgx
clients/js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.19.12: 1 known vulnerabilityGHSA-67mh-4wv8-2f99
clients/js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.micromatch@4.0.7: 1 known vulnerabilityGHSA-952p-6rrq-rcjv
clients/js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.qs@6.11.2: 15 known vulnerabilitiesGHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883 +10 more
clients/js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.tsup@7.3.0: 1 known vulnerabilityGHSA-3mv9-4h5g-vhg3
clients/js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.yaml@2.4.5: 1 known vulnerabilityGHSA-48c2-rrv3-qjmp
clients/js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.27.1: 1 known vulnerabilityGHSA-4x5r-pxfx-6jf8
clients/new-js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@hey-api/openapi-ts@0.67.3: 1 known vulnerabilityGHSA-hhx9-57xq-r5rw
clients/new-js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@smithy/config-resolver@4.1.2: 1 known vulnerabilityGHSA-6475-r3vj-m8vf
clients/new-js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.ajv@8.17.1: 2 known vulnerabilitiesGHSA-2g4f-4pwh-qvx6, GHSA-2g4f-4pwh-qvx6
clients/new-js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.follow-redirects@1.15.9: 1 known vulnerabilityGHSA-r4q5-vmmm-2653
clients/new-js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.yaml@2.7.1: 1 known vulnerabilityGHSA-48c2-rrv3-qjmp
clients/new-js/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.9.1: 3 known vulnerabilitiesGHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h
clients/python/requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.idna@3.9.0: 3 known vulnerabilitiesPYSEC-2026-215, PYSEC-2026-215, PYSEC-2026-215
clients/python/requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.pydantic@1.9.2: 1 known vulnerabilityPYSEC-2026-1812
clients/python/requirements_dev.txt - lowLow. Minor, or common in normal tools. Shown for information.github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@1.6.7: 1 known vulnerabilityGO-2026-5764
go/go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/aws/aws-sdk-go-v2/service/s3@1.71.0: 1 known vulnerabilityGO-2026-5764
go/go.mod - lowLow. Minor, or common in normal tools. Shown for information.github.com/moby/sys/user@0.1.0: 1 known vulnerabilityGO-2026-6686
go/go.mod - lowLow. Minor, or common in normal tools. Shown for information.go.opentelemetry.io/otel/exporters/otlp/otlptrace@1.24.0: 1 known vulnerabilityGO-2026-6505
go/go.mod - lowLow. Minor, or common in normal tools. Shown for information.go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@1.24.0: 1 known vulnerabilityGO-2026-6505
go/go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/mod@0.17.0: 2 known vulnerabilitiesGO-2026-6179, GO-2026-6180
go/go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/net@0.27.0: 20 known vulnerabilitiesGO-2024-3333, GO-2025-3503, GO-2025-3595, GO-2026-4440, GO-2026-4441 +15 more
go/go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/sys@0.22.0: 1 known vulnerabilityGO-2026-5024
go/go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/text@0.16.0: 2 known vulnerabilitiesGO-2026-5970, GO-2026-6629
go/go.mod - lowLow. Minor, or common in normal tools. Shown for information.@ai-sdk/provider-utils@3.0.19: 1 known vulnerabilityGHSA-866g-f22w-33x8
sample_apps/movies/package-lock.json
Network activity
During install
files.pythonhosted.orggithub.comindex.crates.iopypi.orgstatic.crates.iostatic.rust-lang.org
While running
Not run — the code wasn't started in this scan
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Chroma alternatives
View more →Similar ai agents in Deployment & DevOps, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Chroma (this page) chroma-core | 30k | Apache-2.0 | Oct 30, 2026 | Scanned, no flagged issues |
| Langflow langflow-ai | 156k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Novu novuhq | 40k | None found | Nov 1, 2026 | Not scanned yet |
| QwenPaw agentscope-ai | 37k | Apache-2.0 | Oct 30, 2026 | Scanned, no flagged issues |
| Kestra kestra-io | 30k | Apache-2.0 | Oct 30, 2026 | Scanned, no flagged issues |
| Nocobase nocobase | 25k | None found | Nov 1, 2026 | Not scanned yet |