Future Agi AI Agent

by future-agi• 2.2k•• Scanned•Claim this listing•Request removal
Data Science & MLagent evaluationai agentsai evalsai gatewayai observability

Open-source, end-to-end platform for evaluating, observing, and improving LLM and AI agent applications. Tracing · Evals · Simulations · Datasets · Gateway · Guardrails. Self-hostable. Apache 2.0.

Future Agi is an open-source ai agent by future-agi, written mainly in Python, with 2,234 GitHub stars and the Apache-2.0 license. Its code was last updated Nov 1, 2026.

Scan summary: scanned Nov 5, 2026 at commit 28e729a. Seen able to connect to the internet. Scan policy

Scanned
Full scan at 28e729a · Nov 5, 2026
Scanned Builds
Static code scanwarn
Secrets scanfail
Dependency audit1808 known vulnerabilitiesfail
Manifestnonewarn
Buildpass
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (200)

  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    futureagi/accounts/gcp_marketplace_utils.py:85
  • medium
    github.com/klauspost/compress@1.18.4: 1 known vulnerability
    GO-2026-5841
    fi-collector/go.mod
  • medium
    @remix-run/router@1.9.0: 4 known vulnerabilities
    GHSA-2j2x-hqr9-3h42, GHSA-2w69-qvjg-hvjx, GHSA-2j2x-hqr9-3h42, GHSA-2w69-qvjg-hvjx
    frontend/package-lock.json
  • medium
    axios@1.5.1: 64 known vulnerabilities
    GHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3w6x-2g7m-8v23, GHSA-42h9-826w-cgv3 +59 more
    frontend/package-lock.json
  • medium
    brace-expansion@1.1.11: 16 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +11 more
    frontend/package-lock.json
  • medium
    brace-expansion@2.0.1: 16 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +11 more
    frontend/package-lock.json
  • medium
    brace-expansion@5.0.4: 8 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-jxxr-4gwj-5jf2, GHSA-mh99-v99m-4gvg +3 more
    frontend/package-lock.json
  • medium
    browserslist@4.28.2: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    frontend/package-lock.json
  • medium
    dompurify@3.3.3: 34 known vulnerabilities
    GHSA-39q2-94rc-95cp, GHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4 +29 more
    frontend/package-lock.json
  • medium
    fflate@0.4.8: 2 known vulnerabilities
    GHSA-px8p-9vwx-vf98, GHSA-px8p-9vwx-vf98
    frontend/package-lock.json
  • medium
    fflate@0.7.4: 2 known vulnerabilities
    GHSA-px8p-9vwx-vf98, GHSA-px8p-9vwx-vf98
    frontend/package-lock.json
  • medium
    fflate@0.8.2: 2 known vulnerabilities
    GHSA-px8p-9vwx-vf98, GHSA-px8p-9vwx-vf98
    frontend/package-lock.json
  • medium
    flatted@3.3.3: 4 known vulnerabilities
    GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh, GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
    frontend/package-lock.json
  • medium
    glob@10.4.5: 4 known vulnerabilities
    GHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2, GHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
    frontend/package-lock.json
  • medium
    js-yaml@4.1.0: 10 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +5 more
    frontend/package-lock.json
  • medium
    lodash@4.17.21: 4 known vulnerabilities
    GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg, GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
    frontend/package-lock.json
  • medium
    lodash-es@4.17.21: 4 known vulnerabilities
    GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg, GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
    frontend/package-lock.json
  • medium
    minimatch@3.1.2: 6 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +1 more
    frontend/package-lock.json
  • medium
    minimatch@9.0.3: 8 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249, GHSA-23c5-xmqv-rm74 +3 more
    frontend/package-lock.json
  • medium
    minimatch@9.0.5: 8 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249, GHSA-23c5-xmqv-rm74 +3 more
    frontend/package-lock.json
  • medium
    nanoid@3.3.11: 6 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w, GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8 +1 more
    frontend/package-lock.json
  • medium
    pdfjs-dist@3.11.174: 2 known vulnerabilities
    GHSA-wgrm-67xf-hhpq, GHSA-wgrm-67xf-hhpq
    frontend/package-lock.json
  • medium
    picomatch@2.3.1: 4 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    frontend/package-lock.json
  • medium
    picomatch@4.0.2: 4 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    frontend/package-lock.json
  • medium
    picomatch@4.0.3: 4 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    frontend/package-lock.json
  • medium
    postcss@8.5.6: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    frontend/package-lock.json
  • medium
    source-map-js@1.2.1: 2 known vulnerabilities
    GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
    frontend/package-lock.json
  • medium
    uuid@13.0.0: 2 known vulnerabilities
    GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq
    frontend/package-lock.json
  • medium
    vite@5.4.21: 16 known vulnerabilities
    GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +11 more
    frontend/package-lock.json
  • medium
    vite@7.3.1: 10 known vulnerabilities
    GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +5 more
    frontend/package-lock.json
  • medium
    ws@8.18.1: 2 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    frontend/package-lock.json
  • medium
    zod@3.23.8: 2 known vulnerabilities
    GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
    frontend/package-lock.json
  • medium
    basic-ftp@5.3.1: 1 known vulnerability
    GHSA-c475-qrg2-pj4r
    frontend/yarn.lock
  • medium
    brace-expansion@5.0.6: 6 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
    frontend/yarn.lock
  • medium
    browserslist@4.24.4: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    frontend/yarn.lock
  • medium
    cross-spawn@7.0.3: 1 known vulnerability
    GHSA-3xgq-45jj-v275
    frontend/yarn.lock
  • medium
    extract-zip@2.0.1: 2 known vulnerabilities
    GHSA-7pqw-9j4j-h8q3, GHSA-jmr9-qjv8-65gv
    frontend/yarn.lock
  • medium
    fast-uri@3.1.2: 11 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-fph4-wmhf-6fwf +6 more
    frontend/yarn.lock
  • medium
    flatted@3.2.7: 2 known vulnerabilities
    GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
    frontend/yarn.lock
  • medium
    ip-address@10.1.1: 7 known vulnerabilities
    GHSA-22jq-vg5j-6vgg, GHSA-4xrf-jv44-h6hh, GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr +2 more
    frontend/yarn.lock
  • medium
    js-yaml@4.1.1: 4 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
    frontend/yarn.lock
  • medium
    linkify-it@5.0.0: 2 known vulnerabilities
    GHSA-22p9-wv53-3rq4, GHSA-v245-v573-v5vm
    frontend/yarn.lock
  • medium
    markdown-it@14.1.1: 5 known vulnerabilities
    GHSA-253c-mchw-3w2r, GHSA-6v5v-wf23-fmfq, GHSA-gfr2-rv44-r23c, GHSA-r7fv-28h4-cvq7, GHSA-vfgh-jcmw-g37q
    frontend/yarn.lock
  • medium
    minimatch@8.0.4: 4 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
    frontend/yarn.lock
  • medium
    nanoid@3.3.7: 4 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-mwcw-c2x4-8c55, GHSA-xwg4-73v4-xw9w
    frontend/yarn.lock
  • medium
    postcss@8.4.41: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    frontend/yarn.lock
  • medium
    postcss@8.5.5: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    frontend/yarn.lock
  • medium
    postcss@8.5.8: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    frontend/yarn.lock
  • medium
    rollup@4.43.0: 1 known vulnerability
    GHSA-mw96-cpmx-2vgc
    frontend/yarn.lock
  • medium
    source-map-js@1.2.0: 1 known vulnerability
    GHSA-68fv-2mgg-jv7q
    frontend/yarn.lock
  • medium
    vite@6.3.5: 12 known vulnerabilities
    GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-93m4-6634-74q7, GHSA-9jrq-w75r-8gcw +7 more
    frontend/yarn.lock
  • medium
    ws@8.18.2: 2 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    frontend/yarn.lock
  • medium
    ws@8.20.0: 2 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    frontend/yarn.lock
  • medium
    zod@3.25.76: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    frontend/yarn.lock
  • medium
    black@26.5.1: 1 known vulnerability
    GHSA-cg8m-r9f2-5wm2
    futureagi/agentic_eval/requirements-test.txt
  • medium
    nbconvert@7.9.2: 4 known vulnerabilities
    PYSEC-2026-1691, PYSEC-2026-2229, PYSEC-2026-2230, GHSA-pjvx-prjx-h659
    futureagi/agentic_eval/requirements-test.txt
  • medium
    urllib3@2.7.0: 12 known vulnerabilities
    PYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177, PYSEC-2026-4175, PYSEC-2026-4176 +7 more
    futureagi/code-executor/requirements.sandbox.txt
  • medium
    @modelcontextprotocol/sdk@1.27.1: 6 known vulnerabilities
    GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
    futureagi/ee/agenthub/eval_orchestrator/test_mcp_server/package-lock.json
  • medium
    body-parser@1.20.4: 2 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
    futureagi/ee/agenthub/eval_orchestrator/test_mcp_server/package-lock.json
  • medium
    body-parser@2.2.2: 2 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
    futureagi/ee/agenthub/eval_orchestrator/test_mcp_server/package-lock.json
  • medium
    fast-uri@3.1.0: 12 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
    futureagi/ee/agenthub/eval_orchestrator/test_mcp_server/package-lock.json
  • medium
    hono@4.12.8: 32 known vulnerabilities
    GHSA-26pp-8wgv-hjvm, GHSA-2gcr-mfcq-wcc3, GHSA-3hrh-pfw6-9m5x, GHSA-458j-xx4x-4375, GHSA-54fx-42gc-7vw4 +27 more
    futureagi/ee/agenthub/eval_orchestrator/test_mcp_server/package-lock.json
  • medium
    ip-address@10.1.0: 6 known vulnerabilities
    GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more
    futureagi/ee/agenthub/eval_orchestrator/test_mcp_server/package-lock.json
  • medium
    path-to-regexp@0.1.12: 1 known vulnerability
    GHSA-37ch-88jc-xwx2
    futureagi/ee/agenthub/eval_orchestrator/test_mcp_server/package-lock.json
  • medium
    path-to-regexp@8.3.0: 2 known vulnerabilities
    GHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f
    futureagi/ee/agenthub/eval_orchestrator/test_mcp_server/package-lock.json
  • medium
    zod@4.3.6: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    futureagi/ee/agenthub/eval_orchestrator/test_mcp_server/package-lock.json
  • medium
    aiohttp@3.14.3: 32 known vulnerabilities
    GHSA-2g87-pp6c-29x5, GHSA-494j-54xm-rwp3, GHSA-5wr8-gcqf-gqf3, GHSA-6cjc-53gc-5rqm, GHSA-9xw5-w5jj-pvcg +27 more
    futureagi/ee/requirements.txt
  • medium
    cbor2@5.8.0: 3 known vulnerabilities
    PYSEC-2026-2123, PYSEC-2026-2123, PYSEC-2026-2123
    futureagi/ee/requirements.txt
  • medium
    django@5.1.15: 24 known vulnerabilities
    PYSEC-2026-3717, PYSEC-2026-4035, GHSA-3h9f-r86x-qvjx, GHSA-8cjm-8mp7-r2xf, GHSA-8qcx-xf44-272x +19 more
    futureagi/ee/requirements.txt
  • medium
    djangorestframework@3.16.1: 15 known vulnerabilities
    PYSEC-2026-3827, PYSEC-2026-3828, GHSA-33wh-fxxf-88vv, GHSA-3547-9m27-7rxg, GHSA-xw6w-gcfp-cf8m +10 more
    futureagi/ee/requirements.txt
  • medium
    ecdsa@0.19.1: 8 known vulnerabilities
    PYSEC-2026-1325, PYSEC-2026-2467, PYSEC-2026-1325, PYSEC-2026-2467, PYSEC-2026-1325 +3 more
    futureagi/ee/requirements.txt
  • medium
    fsspec@2025.10.0: 3 known vulnerabilities
    PYSEC-2026-4217, PYSEC-2026-4217, PYSEC-2026-4217
    futureagi/ee/requirements.txt
  • medium
    json-repair@0.55.0: 3 known vulnerabilities
    GHSA-xf7x-x43h-rpqh, GHSA-xf7x-x43h-rpqh, GHSA-xf7x-x43h-rpqh
    futureagi/ee/requirements.txt
  • medium
    langchain@0.3.27: 4 known vulnerabilities
    PYSEC-2026-2192, PYSEC-2026-2555, PYSEC-2026-2192, PYSEC-2026-2555
    futureagi/ee/requirements.txt
  • medium
    langchain-core@0.3.83: 12 known vulnerabilities
    PYSEC-2026-2193, PYSEC-2026-2562, PYSEC-2026-2563, PYSEC-2026-2564, PYSEC-2026-2193 +7 more
    futureagi/ee/requirements.txt
  • medium
    langsmith@0.6.3: 9 known vulnerabilities
    PYSEC-2026-2582, PYSEC-2026-2583, GHSA-f4xh-w4cj-qxq8, PYSEC-2026-2582, PYSEC-2026-2583 +4 more
    futureagi/ee/requirements.txt
  • medium
    litellm@1.84.10: 9 known vulnerabilities
    PYSEC-2026-4066, GHSA-g5ff-637f-6q2m, GHSA-hhww-mrg2-969h, PYSEC-2026-4066, GHSA-g5ff-637f-6q2m +4 more
    futureagi/ee/requirements.txt
  • medium
    mako@1.3.10: 6 known vulnerabilities
    PYSEC-2026-2617, PYSEC-2026-4243, PYSEC-2026-88, PYSEC-2026-2617, PYSEC-2026-4243 +1 more
    futureagi/ee/requirements.txt
  • medium
    msgpack@1.1.2: 6 known vulnerabilities
    PYSEC-2026-3625, GHSA-j586-36cw-2gc2, PYSEC-2026-3625, GHSA-j586-36cw-2gc2, PYSEC-2026-3625 +1 more
    futureagi/ee/requirements.txt
  • medium
    nltk@3.10.3: 6 known vulnerabilities
    GHSA-8mgp-746c-j5xp, GHSA-j456-xh4h-cpf2, GHSA-8mgp-746c-j5xp, GHSA-j456-xh4h-cpf2, GHSA-8mgp-746c-j5xp +1 more
    futureagi/ee/requirements.txt
  • medium
    oauthlib@3.3.1: 8 known vulnerabilities
    PYSEC-2026-4113, PYSEC-2026-4114, GHSA-3jp2-3mrg-2vxc, GHSA-7984-qgvg-3j9c, PYSEC-2026-4113 +3 more
    futureagi/ee/requirements.txt
  • medium
    orjson@3.11.5: 3 known vulnerabilities
    GHSA-hx9q-6w63-j58v, GHSA-hx9q-6w63-j58v, GHSA-hx9q-6w63-j58v
    futureagi/ee/requirements.txt
  • medium
    pyarrow@22.0.0: 2 known vulnerabilities
    PYSEC-2026-113, PYSEC-2026-113
    futureagi/ee/requirements.txt
  • medium
    pyasn1@0.6.1: 27 known vulnerabilities
    PYSEC-2026-1810, PYSEC-2026-2263, PYSEC-2026-3455, PYSEC-2026-3456, PYSEC-2026-3457 +22 more
    futureagi/ee/requirements.txt
  • medium
    pypdf@6.19.0: 54 known vulnerabilities
    GHSA-39mj-jf6j-2qj3, GHSA-42gh-23hr-vphw, GHSA-4vqv-7265-gm2w, GHSA-5849-834g-hvw5, GHSA-5hx5-vpf9-5wcv +49 more
    futureagi/ee/requirements.txt
  • medium
    soupsieve@2.8.3: 12 known vulnerabilities
    PYSEC-2026-3071, PYSEC-2026-3072, PYSEC-2026-4170, PYSEC-2026-4171, PYSEC-2026-3071 +7 more
    futureagi/ee/requirements.txt
  • medium
    sqlparse@0.5.5: 15 known vulnerabilities
    PYSEC-2026-3696, PYSEC-2026-3697, PYSEC-2026-3698, PYSEC-2026-3699, PYSEC-2026-3923 +10 more
    futureagi/ee/requirements.txt
  • medium
    starlette@1.0.0: 15 known vulnerabilities
    PYSEC-2026-161, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248, PYSEC-2026-249 +10 more
    futureagi/ee/requirements.txt
  • medium
    tornado@6.5.4: 28 known vulnerabilities
    PYSEC-2026-140, PYSEC-2026-2287, PYSEC-2026-3387, PYSEC-2026-3388, PYSEC-2026-3389 +23 more
    futureagi/ee/requirements.txt
  • medium
    jinja2@3.1.4: 6 known vulnerabilities
    PYSEC-2026-1471, PYSEC-2026-1472, PYSEC-2026-1475, PYSEC-2026-1471, PYSEC-2026-1472 +1 more
    futureagi/model_serving/requirements.txt
  • medium
    fsspec@2024.6.1: 1 known vulnerability
    PYSEC-2026-4217
    futureagi/model_serving/requirements.txt
  • medium
    gunicorn@21.2.0: 2 known vulnerabilities
    PYSEC-2026-1433, PYSEC-2026-1434
    futureagi/model_serving/requirements.txt
  • medium
    starlette@0.46.2: 7 known vulnerabilities
    PYSEC-2026-161, PYSEC-2026-1941, PYSEC-2026-1942, PYSEC-2026-2280, PYSEC-2026-2281 +2 more
    futureagi/model_serving/requirements.txt
  • medium
    torch@2.6.0: 22 known vulnerabilities
    PYSEC-2025-191, PYSEC-2025-198, PYSEC-2025-199, PYSEC-2025-200, PYSEC-2025-201 +17 more
    futureagi/model_serving/requirements.txt
  • medium
    urllib3@2.2.2: 8 known vulnerabilities
    PYSEC-2026-141, PYSEC-2026-1994, PYSEC-2026-1996, PYSEC-2026-1997, PYSEC-2026-1998 +3 more
    futureagi/model_serving/requirements.txt
  • medium
    djangorestframework@3.16.0: 5 known vulnerabilities
    PYSEC-2026-3827, PYSEC-2026-3828, GHSA-33wh-fxxf-88vv, GHSA-3547-9m27-7rxg, GHSA-xw6w-gcfp-cf8m
    futureagi/requirements-test.txt
  • medium
    fsspec@2025.3.0: 1 known vulnerability
    PYSEC-2026-4217
    futureagi/requirements-test.txt
  • medium
    google-cloud-aiplatform@1.101.0: 2 known vulnerabilities
    PYSEC-2026-2499, PYSEC-2026-2500
    futureagi/requirements-test.txt
  • medium
    json-repair@0.47.6: 1 known vulnerability
    GHSA-xf7x-x43h-rpqh
    futureagi/requirements-test.txt
  • medium
    langchain@0.2.17: 2 known vulnerabilities
    PYSEC-2026-2192, PYSEC-2026-2555
    futureagi/requirements-test.txt
  • medium
    langchain-text-splitters@0.2.4: 2 known vulnerabilities
    PYSEC-2026-1520, PYSEC-2026-77
    futureagi/requirements-test.txt
  • medium
    langsmith@0.1.147: 3 known vulnerabilities
    PYSEC-2026-2582, PYSEC-2026-2583, GHSA-f4xh-w4cj-qxq8
    futureagi/requirements-test.txt
  • medium
    lxml@4.9.4: 1 known vulnerability
    PYSEC-2026-87
    futureagi/requirements-test.txt
  • medium
    msgpack@1.1.1: 2 known vulnerabilities
    PYSEC-2026-3625, GHSA-j586-36cw-2gc2
    futureagi/requirements-test.txt
  • medium
    orjson@3.10.18: 1 known vulnerability
    PYSEC-2026-107
    futureagi/requirements-test.txt
  • medium
    pdfminer-six@20231228: 2 known vulnerabilities
    PYSEC-2026-1761, PYSEC-2026-1762
    futureagi/requirements-test.txt
  • medium
    protobuf@5.29.5: 1 known vulnerability
    PYSEC-2026-1805
    futureagi/requirements-test.txt
  • medium
    pyasn1@0.6.4: 4 known vulnerabilities
    GHSA-2qm8-x737-gmw5, GHSA-9m75-vc3g-4x39, GHSA-fm9c-5rcf-2q5p, GHSA-mm57-4v3p-rchx
    futureagi/requirements-test.txt
  • medium
    pyjwt@2.14.0: 2 known vulnerabilities
    PYSEC-2026-4141, PYSEC-2026-4183
    futureagi/requirements-test.txt
  • medium
    pypdf@5.7.0: 67 known vulnerabilities
    PYSEC-2026-1827, PYSEC-2026-1828, PYSEC-2026-1829, PYSEC-2026-1830, PYSEC-2026-1831 +62 more
    futureagi/requirements-test.txt
  • medium
    sqlparse@0.5.3: 6 known vulnerabilities
    PYSEC-2026-3696, PYSEC-2026-3697, PYSEC-2026-3698, PYSEC-2026-3699, PYSEC-2026-3923 +1 more
    futureagi/requirements-test.txt
  • medium
    tornado@6.5.1: 17 known vulnerabilities
    PYSEC-2025-265, PYSEC-2025-266, PYSEC-2025-267, PYSEC-2026-140, PYSEC-2026-2287 +12 more
    futureagi/requirements-test.txt
  • medium
    virtualenv@20.31.2: 20 known vulnerabilities
    PYSEC-2026-2009, PYSEC-2026-4011, PYSEC-2026-4012, PYSEC-2026-4013, PYSEC-2026-4014 +15 more
    futureagi/requirements-test.txt
  • medium
    virtualenv@20.36.1: 19 known vulnerabilities
    PYSEC-2026-4011, PYSEC-2026-4012, PYSEC-2026-4013, PYSEC-2026-4014, GHSA-394h-qwmc-48pf +14 more
    futureagi/uv.lock
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    frontend/src/pages/dashboard/harness/requestMapper.test.js:92
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    frontend/src/sections/projects/Alerts/__tests__/fixtures.js:15
  • low
    Possible example credential in docs/tests: jwt
    agentcc-gateway/internal/guardrails/secrets/secrets_test.go:101
  • low
    Possible example credential in docs/tests: stripe-access-token
    agentcc-gateway/internal/guardrails/secrets/secrets_test.go:69
  • low
    Possible example credential in docs/tests: gitlab-pat
    agentcc-gateway/internal/guardrails/secrets/secrets_test.go:53
  • low
    Possible example credential in docs/tests: generic-api-key
    agentcc-gateway/internal/config/config_test.go:715
  • low
    Possible example credential in docs/tests: generic-api-key
    agentcc-gateway/internal/plugins/otel/bodies_test.go:115
  • low
    Possible example credential in docs/tests: generic-api-key
    4 matches in this file
    agentcc-gateway/internal/providers/bedrock/auth_test.go:134
  • low
    Possible example credential in docs/tests: generic-api-key
    fi-collector/cmd/fi-collector/main_test.go:116
  • low
    Possible example credential in docs/tests: generic-api-key
    fi-collector/pkg/chwriter/writer_test.go:363
  • low
    Possible example credential in docs/tests: generic-api-key
    frontend/src/sections/keys/view/__tests__/SecretKeyRenderer.test.jsx:14
  • low
    Possible example credential in docs/tests: generic-api-key
    frontend/src/sections/simulate/environments/workspace/agents/__tests__/agentCredentials.test.jsx:27
  • low
    Possible example credential in docs/tests: generic-api-key
    frontend/src/sections/projects/LLMTracing/__tests__/TraceFilterPanel.test.jsx:3595
  • low
    Possible example credential in docs/tests: generic-api-key
    futureagi/agentic_eval/core_evals/run_prompt/tests/test_image_generation.py:462
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    futureagi/agentic_eval/core_evals/run_prompt/tests/conftest.py:82
  • low
    Possible example credential in docs/tests: generic-api-key
    futureagi/agentic_eval/core_evals/run_prompt/tests/test_live_all_providers.py:1377
  • low
    Possible example credential in docs/tests: curl-auth-header
    futureagi/ee/agenthub/eval_orchestrator/test_mcp_server/README.md:65
  • low
    Possible example credential in docs/tests: generic-api-key
    futureagi/ee/voice/tests/test_livekit_service.py:33
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    futureagi/ee/usage/tests/test_deployment.py:69
  • low
    Possible example credential in docs/tests: generic-api-key
    futureagi/integrations/tests/conftest.py:63
  • low
    Possible example credential in docs/tests: generic-api-key
    futureagi/integrations/tests/test_views.py:884
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    futureagi/model_hub/tests/test_eval_sdk_code_contracts.py:80
  • low
    Possible example credential in docs/tests: generic-api-key
    futureagi/sdk/tests/test_evaluations.py:23
  • low
    Possible example credential in docs/tests: generic-api-key
    futureagi/sdk/tests/test_eval_ci_cd.py:21
  • low
    Possible example credential in docs/tests: generic-api-key
    futureagi/simulate/tests/test_agent_definition_services.py:425
  • low
    Possible example credential in docs/tests: generic-api-key
    futureagi/simulate/tests/test_agent_overview_api.py:607
  • low
    Possible example credential in docs/tests: generic-api-key
    futureagi/simulate/tests/test_agent_definition_serializers.py:389
  • low
    Possible example credential in docs/tests: generic-api-key
    4 matches in this file
    futureagi/simulate/tests/test_harness_versioning_rebuild_report.py:151
  • low
    Possible example credential in docs/tests: generic-api-key
    10 matches in this file
    futureagi/simulate/tests/test_speaker_role_resolver.py:73
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    futureagi/simulate/tests/test_speaker_role_read_alignment.py:416
  • low
    Possible example credential in docs/tests: generic-api-key
    4 matches in this file
    futureagi/simulate/tests/test_harness_nudges.py:1315
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    futureagi/simulate/utils/test_execution_utils.py:737
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    futureagi/simulate/tests/test_simulation_read_surfaces.py:153
  • low
    Possible example credential in docs/tests: generic-api-key
    futureagi/tracer/tests/test_dashboard_read_density.py:333
  • low
    Possible example credential in docs/tests: generic-api-key
    5 matches in this file
    futureagi/tracer/tests/test_observability_providers.py:47
  • low
    Possible example credential in docs/tests: generic-api-key
    futureagi/tracer/tests/test_vapi_recording_service.py:398

Network activity

During install
registry.yarnpkg.com
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Future Agi alternatives

View more →

Similar ai agents in Data Science & ML, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Future Agi (this page)
future-agi
2.2kApache-2.0Nov 1, 2026Scanned, no flagged issues
Ragflow
infiniflow
93kApache-2.0Oct 31, 2026Scanned, no flagged issues
Cherry Studio
CherryHQ
53kAGPL-3.0Nov 1, 2026Scanned, no flagged issues
PageIndex
VectifyAI
40kMITOct 29, 2026Scanned, no flagged issues
Graphiti
getzep
32kApache-2.0Nov 1, 2026Scanned, no flagged issues
Cua
trycua
31kMITNov 1, 2026Scanned, no flagged issues