Generative AI AI Agent by GoogleCloudPlatform

by GoogleCloudPlatform• 18k•• Scanned•Claim this listing•Request removal
Cloud Infrastructureagentsgcpgeminigemini apigen ai

Sample code and notebooks for Generative AI on Google Cloud, with Gemini Enterprise Agent Platform

Generative AI is an open-source ai agent by GoogleCloudPlatform, written mainly in Jupyter Notebook, with 17,835 GitHub stars and the Apache-2.0 license. Its code was last updated Oct 30, 2026.

Scan summary: scanned Nov 5, 2026 at commit ef43bc1. Seen able to run shell commands, run dynamic code. Scan policy

Scanned
Full scan at ef43bc1 · Nov 5, 2026
Scanned
Static code scanwarn
Secrets scanfail
Dependency audit6024 known vulnerabilitiesfail
Manifestnonewarn
Buildn/a
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (200)

  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    search/gemini-enterprise/ge-demo-generator/skills/ge-demo-generator/templates/scripts/generate_and_upload_external_files.py:58
  • medium
    aiohttp@3.13.4: 44 known vulnerabilities
    PYSEC-2026-2104, PYSEC-2026-2105, PYSEC-2026-2106, PYSEC-2026-2107, PYSEC-2026-2108 +39 more
    agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock
  • medium
    cryptography@48.0.0: 12 known vulnerabilities
    PYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554, GHSA-537c-gmf6-5ccf, PYSEC-2026-3552 +7 more
    agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock
  • medium
    filelock@3.29.0: 18 known vulnerabilities
    GHSA-567q-5qvw-pf92, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9vhv-jxww-xfm5, GHSA-cwqr-hh33-gh44 +13 more
    agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock
  • medium
    fsspec@2026.4.0: 2 known vulnerabilities
    PYSEC-2026-4217, PYSEC-2026-4217
    agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock
  • medium
    httplib2@0.31.2: 3 known vulnerabilities
    PYSEC-2026-3444, PYSEC-2026-3444, PYSEC-2026-3444
    agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock
  • medium
    joserfc@1.6.5: 8 known vulnerabilities
    PYSEC-2026-2528, PYSEC-2026-2530, GHSA-9pg5-8c7x-5hfx, GHSA-jpxq-7h8p-2q76, PYSEC-2026-2528 +3 more
    agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock
  • medium
    mcp@1.27.1: 7 known vulnerabilities
    PYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more
    agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock
  • medium
    pyasn1@0.6.3: 35 known vulnerabilities
    PYSEC-2026-3455, PYSEC-2026-3456, PYSEC-2026-3457, GHSA-2qm8-x737-gmw5, GHSA-9m75-vc3g-4x39 +30 more
    agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock
  • medium
    python-multipart@0.0.29: 4 known vulnerabilities
    PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3040, PYSEC-2026-3041
    agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock
  • medium
    sqlparse@0.5.5: 25 known vulnerabilities
    PYSEC-2026-3696, PYSEC-2026-3697, PYSEC-2026-3698, PYSEC-2026-3699, PYSEC-2026-3923 +20 more
    agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock
  • medium
    starlette@0.52.1: 20 known vulnerabilities
    PYSEC-2026-161, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248, PYSEC-2026-249 +15 more
    agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock
  • medium
    urllib3@2.7.0: 18 known vulnerabilities
    PYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177, PYSEC-2026-4175, PYSEC-2026-4176 +13 more
    agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock
  • medium
    google-cloud-aiplatform@1.71.1: 1 known vulnerability
    PYSEC-2026-2500
    agents/invoice-processing/invoice_processing/requirements.txt
  • medium
    python-multipart@0.0.9: 80 known vulnerabilities
    PYSEC-2026-1851, PYSEC-2026-1852, PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038 +75 more
    agents/invoice-processing/invoice_processing/requirements.txt
  • medium
    aiohttp@3.13.5: 44 known vulnerabilities
    PYSEC-2026-2104, PYSEC-2026-2105, PYSEC-2026-2106, PYSEC-2026-2107, PYSEC-2026-2108 +39 more
    agents/invoice-processing/uv.lock
  • medium
    cryptography@46.0.7: 4 known vulnerabilities
    PYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554, GHSA-537c-gmf6-5ccf
    agents/invoice-processing/uv.lock
  • medium
    mako@1.3.11: 2 known vulnerabilities
    PYSEC-2026-2617, PYSEC-2026-4243
    agents/invoice-processing/uv.lock
  • medium
    mcp@1.27.0: 14 known vulnerabilities
    PYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +9 more
    agents/invoice-processing/uv.lock
  • medium
    python-multipart@0.0.26: 5 known vulnerabilities
    PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3039, PYSEC-2026-3040, PYSEC-2026-3041
    agents/invoice-processing/uv.lock
  • medium
    urllib3@2.6.3: 10 known vulnerabilities
    PYSEC-2026-141, PYSEC-2026-142, PYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177 +5 more
    agents/invoice-processing/uv.lock
  • medium
    aiohttp@3.14.2: 9 known vulnerabilities
    PYSEC-2026-3545, GHSA-2g87-pp6c-29x5, GHSA-494j-54xm-rwp3, GHSA-5wr8-gcqf-gqf3, GHSA-6cjc-53gc-5rqm +4 more
    agents/personalized-agent-swarms/uv.lock
  • medium
    cryptography@49.0.0: 2 known vulnerabilities
    PYSEC-2026-3552, PYSEC-2026-3552
    agents/personalized-agent-swarms/uv.lock
  • medium
    joserfc@1.7.4: 4 known vulnerabilities
    GHSA-9pg5-8c7x-5hfx, GHSA-jpxq-7h8p-2q76, GHSA-9pg5-8c7x-5hfx, GHSA-jpxq-7h8p-2q76
    agents/personalized-agent-swarms/uv.lock
  • medium
    pyasn1@0.6.4: 12 known vulnerabilities
    GHSA-2qm8-x737-gmw5, GHSA-9m75-vc3g-4x39, GHSA-fm9c-5rcf-2q5p, GHSA-mm57-4v3p-rchx, GHSA-2qm8-x737-gmw5 +7 more
    agents/personalized-agent-swarms/uv.lock
  • medium
    jupyter-core@5.7.2: 3 known vulnerabilities
    PYSEC-2026-1477, PYSEC-2026-1477, PYSEC-2026-1477
    gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock
  • medium
    langgraph@0.3.21: 2 known vulnerabilities
    PYSEC-2026-83, PYSEC-2026-83
    gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock
  • medium
    langgraph-checkpoint@2.0.23: 6 known vulnerabilities
    PYSEC-2026-1527, PYSEC-2026-2573, PYSEC-2026-2574, PYSEC-2026-1527, PYSEC-2026-2573 +1 more
    gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock
  • medium
    langgraph-checkpoint-sqlite@2.0.6: 5 known vulnerabilities
    PYSEC-2026-1528, PYSEC-2026-1529, PYSEC-2026-1530, PYSEC-2026-3636, GHSA-6hmw-9432-67qq
    gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock
  • medium
    langgraph-sdk@0.1.60: 2 known vulnerabilities
    PYSEC-2026-2575, PYSEC-2026-4240
    gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock
  • medium
    langsmith@0.3.19: 6 known vulnerabilities
    PYSEC-2026-2582, PYSEC-2026-2583, GHSA-f4xh-w4cj-qxq8, PYSEC-2026-2582, PYSEC-2026-2583 +1 more
    gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock
  • medium
    orjson@3.10.16: 2 known vulnerabilities
    PYSEC-2026-107, PYSEC-2026-107
    gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock
  • medium
    protobuf@5.29.4: 6 known vulnerabilities
    PYSEC-2026-1805, PYSEC-2026-1806, PYSEC-2026-1805, PYSEC-2026-1806, PYSEC-2026-1805 +1 more
    gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock
  • medium
    pyarrow@19.0.1: 2 known vulnerabilities
    PYSEC-2026-113, PYSEC-2026-113
    gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock
  • medium
    pyasn1@0.6.1: 45 known vulnerabilities
    PYSEC-2026-1810, PYSEC-2026-2263, PYSEC-2026-3455, PYSEC-2026-3456, PYSEC-2026-3457 +40 more
    gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock
  • medium
    starlette@0.46.1: 7 known vulnerabilities
    PYSEC-2026-161, PYSEC-2026-1941, PYSEC-2026-1942, PYSEC-2026-2280, PYSEC-2026-2281 +2 more
    gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock
  • medium
    tornado@6.4.2: 54 known vulnerabilities
    PYSEC-2025-265, PYSEC-2025-266, PYSEC-2025-267, PYSEC-2026-140, PYSEC-2026-1974 +49 more
    gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock
  • medium
    urllib3@2.3.0: 24 known vulnerabilities
    PYSEC-2026-141, PYSEC-2026-1994, PYSEC-2026-1996, PYSEC-2026-1997, PYSEC-2026-1998 +19 more
    gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock
  • medium
    langgraph-sdk@0.1.59: 2 known vulnerabilities
    PYSEC-2026-2575, PYSEC-2026-4240
    gemini/agents/genai-experience-concierge/langgraph-demo/frontend/uv.lock
  • medium
    pip@25.0.1: 6 known vulnerabilities
    PYSEC-2026-1795, PYSEC-2026-1796, PYSEC-2026-196, PYSEC-2026-2875, PYSEC-2026-2876 +1 more
    gemini/agents/genai-experience-concierge/uv.lock
  • medium
    virtualenv@20.29.3: 20 known vulnerabilities
    PYSEC-2026-2009, PYSEC-2026-4011, PYSEC-2026-4012, PYSEC-2026-4013, PYSEC-2026-4014 +15 more
    gemini/agents/genai-experience-concierge/uv.lock
  • medium
    google-cloud-aiplatform@1.95.0: 2 known vulnerabilities
    PYSEC-2026-2500, PYSEC-2026-2500
    gemini/mcp/adk_mcp_app/uv.lock
  • medium
    httplib2@0.22.0: 2 known vulnerabilities
    PYSEC-2026-3444, PYSEC-2026-3444
    gemini/mcp/adk_mcp_app/uv.lock
  • medium
    mcp@1.9.1: 14 known vulnerabilities
    PYSEC-2026-1616, PYSEC-2026-1617, PYSEC-2026-1618, PYSEC-2026-3482, PYSEC-2026-3483 +9 more
    gemini/mcp/adk_mcp_app/uv.lock
  • medium
    protobuf@5.29.5: 3 known vulnerabilities
    PYSEC-2026-1805, PYSEC-2026-1805, PYSEC-2026-1805
    gemini/mcp/adk_mcp_app/uv.lock
  • medium
    python-multipart@0.0.20: 14 known vulnerabilities
    PYSEC-2026-1852, PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038, PYSEC-2026-3039 +9 more
    gemini/mcp/adk_mcp_app/uv.lock
  • medium
    starlette@0.46.2: 21 known vulnerabilities
    PYSEC-2026-161, PYSEC-2026-1941, PYSEC-2026-1942, PYSEC-2026-2280, PYSEC-2026-2281 +16 more
    gemini/mcp/adk_mcp_app/uv.lock
  • medium
    urllib3@2.4.0: 16 known vulnerabilities
    PYSEC-2026-141, PYSEC-2026-1994, PYSEC-2026-1996, PYSEC-2026-1997, PYSEC-2026-1998 +11 more
    gemini/mcp/adk_mcp_app/uv.lock
  • medium
    python-multipart@0.0.27: 4 known vulnerabilities
    PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3040, PYSEC-2026-3041
    gemini/multimodal-live-api/livekit-adk/uv.lock
  • medium
    brace-expansion@1.1.12: 28 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +23 more
    gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json
  • medium
    browserslist@4.28.0: 8 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx, GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx, GHSA-73wf-gq98-2v4g +3 more
    gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json
  • medium
    flatted@3.3.3: 8 known vulnerabilities
    GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh, GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh, GHSA-25h7-pfq9-p65f +3 more
    gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json
  • medium
    js-yaml@4.1.1: 16 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-2883-xcg3-v3hh +11 more
    gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json
  • medium
    minimatch@3.1.2: 36 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +31 more
    gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json
  • medium
    nanoid@3.3.11: 12 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w, GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8 +7 more
    gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json
  • medium
    picomatch@4.0.3: 8 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p +3 more
    gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json
  • medium
    postcss@8.5.6: 16 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849, GHSA-6g55-p6wh-862q +11 more
    gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json
  • medium
    rollup@4.53.2: 4 known vulnerabilities
    GHSA-mw96-cpmx-2vgc, GHSA-mw96-cpmx-2vgc, GHSA-mw96-cpmx-2vgc, GHSA-mw96-cpmx-2vgc
    gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json
  • medium
    source-map-js@1.2.1: 10 known vulnerabilities
    GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q +5 more
    gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json
  • medium
    vite@7.2.2: 40 known vulnerabilities
    GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +35 more
    gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json
  • medium
    zod@4.1.12: 4 known vulnerabilities
    GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
    gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json
  • medium
    protobuf@4.25.9: 9 known vulnerabilities
    PYSEC-2026-1805, PYSEC-2026-1805, PYSEC-2026-1805, PYSEC-2026-1805, PYSEC-2026-1805 +4 more
    gemini/multimodal-live-api/project-livewire/server/requirements.txt
  • medium
    cryptography@48.0.1: 3 known vulnerabilities
    PYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554
    gemini/multimodal-live-api/shopping-avatar/ecommerce/backend/uv.lock
  • medium
    starlette@1.2.1: 4 known vulnerabilities
    PYSEC-2026-248, PYSEC-2026-249, PYSEC-2026-248, PYSEC-2026-249
    gemini/multimodal-live-api/shopping-avatar/ecommerce/backend/uv.lock
  • medium
    axios@1.17.0: 22 known vulnerabilities
    GHSA-3pq3-5fj3-cg6v, GHSA-42h9-826w-cgv3, GHSA-44g4-m2mj-wpvx, GHSA-4hqw-qxg8-jxx2, GHSA-542g-h47m-68v8 +17 more
    gemini/multimodal-live-api/shopping-avatar/ecommerce/frontend/package-lock.json
  • medium
    brace-expansion@5.0.6: 6 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
    gemini/multimodal-live-api/shopping-avatar/ecommerce/frontend/package-lock.json
  • medium
    browserslist@4.28.2: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    gemini/multimodal-live-api/shopping-avatar/ecommerce/frontend/package-lock.json
  • medium
    follow-redirects@1.16.0: 3 known vulnerabilities
    GHSA-8r9p-f939-6h3c, GHSA-mrwp-f3q8-3g9p, GHSA-q3jh-wrc6-jgq8
    gemini/multimodal-live-api/shopping-avatar/ecommerce/frontend/package-lock.json
  • medium
    form-data@4.0.5: 1 known vulnerability
    GHSA-hmw2-7cc7-3qxx
    gemini/multimodal-live-api/shopping-avatar/ecommerce/frontend/package-lock.json
  • medium
    nanoid@3.3.12: 2 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8
    gemini/multimodal-live-api/shopping-avatar/ecommerce/frontend/package-lock.json
  • medium
    postcss@8.5.15: 2 known vulnerabilities
    GHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849
    gemini/multimodal-live-api/shopping-avatar/ecommerce/frontend/package-lock.json
  • medium
    vite@8.0.16: 5 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22
    gemini/multimodal-live-api/shopping-avatar/ecommerce/frontend/package-lock.json
  • medium
    zod@4.4.3: 2 known vulnerabilities
    GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
    gemini/multimodal-live-api/shopping-avatar/ecommerce/frontend/package-lock.json
  • medium
    orjson@3.9.9: 2 known vulnerabilities
    PYSEC-2024-40, PYSEC-2026-107
    gemini/sample-apps/gemini-live-telephony-app/requirements.txt
  • medium
    starlette@0.37.2: 56 known vulnerabilities
    PYSEC-2026-161, PYSEC-2026-1941, PYSEC-2026-1943, PYSEC-2026-2280, PYSEC-2026-2281 +51 more
    gemini/sample-apps/gemini-live-telephony-app/requirements.txt
  • medium
    @grpc/grpc-js@1.10.11: 4 known vulnerabilities
    GHSA-5375-pq7m-f5r2, GHSA-99f4-grh7-6pcq, GHSA-f596-whhp-79r4, GHSA-m9gg-hp2v-232j
    gemini/sample-apps/genwealth/api/package-lock.json
  • medium
    body-parser@1.20.2: 15 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-qwcr-r2fm-qrc7, GHSA-v422-hmwv-36x6, GHSA-27r3-jxmh-p828, GHSA-qwcr-r2fm-qrc7 +10 more
    gemini/sample-apps/genwealth/api/package-lock.json
  • medium
    brace-expansion@2.0.1: 72 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +67 more
    gemini/sample-apps/genwealth/api/package-lock.json
  • medium
    cross-spawn@7.0.3: 9 known vulnerabilities
    GHSA-3xgq-45jj-v275, GHSA-3xgq-45jj-v275, GHSA-3xgq-45jj-v275, GHSA-3xgq-45jj-v275, GHSA-3xgq-45jj-v275 +4 more
    gemini/sample-apps/genwealth/api/package-lock.json
  • medium
    fast-uri@3.0.1: 12 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
    gemini/sample-apps/genwealth/api/package-lock.json
  • medium
    glob@10.4.5: 10 known vulnerabilities
    GHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2, GHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2, GHSA-3g3m-2fjr-6pw4 +5 more
    gemini/sample-apps/genwealth/api/package-lock.json
  • medium
    ip-address@9.0.5: 54 known vulnerabilities
    GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +49 more
    gemini/sample-apps/genwealth/api/package-lock.json
  • medium
    jws@4.0.0: 9 known vulnerabilities
    GHSA-869p-cjfg-cm3x, GHSA-869p-cjfg-cm3x, GHSA-869p-cjfg-cm3x, GHSA-869p-cjfg-cm3x, GHSA-869p-cjfg-cm3x +4 more
    gemini/sample-apps/genwealth/api/package-lock.json
  • medium
    lodash@4.17.21: 18 known vulnerabilities
    GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg, GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg, GHSA-r5fr-rjxr-66jc +13 more
    gemini/sample-apps/genwealth/api/package-lock.json
  • medium
    minimatch@9.0.5: 36 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249, GHSA-23c5-xmqv-rm74 +31 more
    gemini/sample-apps/genwealth/api/package-lock.json
  • medium
    multer@1.4.5-lts.1: 11 known vulnerabilities
    GHSA-44fp-w29j-9vj5, GHSA-4pg4-qvpc-4q3h, GHSA-535w-7cp7-47q4, GHSA-5528-5vmv-3xc2, GHSA-72gw-mp4g-v24j +6 more
    gemini/sample-apps/genwealth/api/package-lock.json
  • medium
    pacote@18.0.6: 1 known vulnerability
    GHSA-w4pp-8pjf-rmxw
    gemini/sample-apps/genwealth/api/package-lock.json
  • medium
    path-to-regexp@0.1.7: 16 known vulnerabilities
    GHSA-37ch-88jc-xwx2, GHSA-rhx6-c78j-4q9w, GHSA-37ch-88jc-xwx2, GHSA-rhx6-c78j-4q9w, GHSA-37ch-88jc-xwx2 +11 more
    gemini/sample-apps/genwealth/api/package-lock.json
  • medium
    picomatch@4.0.2: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    gemini/sample-apps/genwealth/api/package-lock.json
  • medium
    sigstore@2.3.1: 2 known vulnerabilities
    GHSA-52v5-jr5w-gjxr, GHSA-52v5-jr5w-gjxr
    gemini/sample-apps/genwealth/api/package-lock.json
  • medium
    tmp@0.0.33: 18 known vulnerabilities
    GHSA-52f5-9888-hmc6, GHSA-ph9p-34f9-6g65, GHSA-52f5-9888-hmc6, GHSA-ph9p-34f9-6g65, GHSA-52f5-9888-hmc6 +13 more
    gemini/sample-apps/genwealth/api/package-lock.json
  • medium
    uuid@8.3.2: 9 known vulnerabilities
    GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq +4 more
    gemini/sample-apps/genwealth/api/package-lock.json
  • medium
    uuid@9.0.1: 9 known vulnerabilities
    GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq +4 more
    gemini/sample-apps/genwealth/api/package-lock.json
  • medium
    google-cloud-aiplatform@1.99.0: 2 known vulnerabilities
    PYSEC-2026-2499, PYSEC-2026-2500
    gemini/sample-apps/genwealth/function-scripts/analyze-prospectus/requirements.txt
  • medium
    langsmith@0.3.9: 3 known vulnerabilities
    PYSEC-2026-2582, PYSEC-2026-2583, GHSA-f4xh-w4cj-qxq8
    gemini/sample-apps/genwealth/function-scripts/analyze-prospectus/requirements.txt
  • medium
    orjson@3.9.15: 5 known vulnerabilities
    PYSEC-2026-107, PYSEC-2026-107, PYSEC-2026-107, PYSEC-2026-107, PYSEC-2026-107
    gemini/sample-apps/genwealth/function-scripts/analyze-prospectus/requirements.txt
  • medium
    langchain@0.3.15: 2 known vulnerabilities
    PYSEC-2026-2192, PYSEC-2026-2555
    gemini/sample-apps/genwealth/function-scripts/process-pdf/requirements.txt
  • medium
    @angular/common@17.3.12: 8 known vulnerabilities
    GHSA-39pv-4j6c-2g6v, GHSA-48r7-hpm6-gfxm, GHSA-58c5-g7wp-6w37, GHSA-jfgx-762w-99vr, GHSA-jhpw-976m-542j +3 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    @angular/router@17.3.12: 2 known vulnerabilities
    GHSA-62vg-58rm-qff7, GHSA-ff3f-86qr-9cv3
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    @babel/plugin-transform-modules-systemjs@7.25.0: 1 known vulnerability
    GHSA-fv7c-fp4j-7gwp
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    @fastify/busboy@2.1.1: 2 known vulnerabilities
    GHSA-gxm5-99cw-xjw9, GHSA-x8mw-p69m-v3mx
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    axios@1.7.4: 33 known vulnerabilities
    GHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3w6x-2g7m-8v23, GHSA-42h9-826w-cgv3 +28 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    body-parser@1.20.3: 10 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6, GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6, GHSA-27r3-jxmh-p828 +5 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    brace-expansion@1.1.11: 64 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +59 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    browserslist@4.23.3: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    compression@1.7.4: 8 known vulnerabilities
    GHSA-vc2v-76pw-4v95, GHSA-vc2v-76pw-4v95, GHSA-vc2v-76pw-4v95, GHSA-vc2v-76pw-4v95, GHSA-vc2v-76pw-4v95 +3 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    engine.io@6.5.5: 10 known vulnerabilities
    GHSA-gr94-w7qr-f4j3, GHSA-r635-g3xr-vw7x, GHSA-gr94-w7qr-f4j3, GHSA-r635-g3xr-vw7x, GHSA-gr94-w7qr-f4j3 +5 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    flatted@3.3.1: 10 known vulnerabilities
    GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh, GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh, GHSA-25h7-pfq9-p65f +5 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    http-proxy-middleware@2.0.6: 20 known vulnerabilities
    GHSA-4www-5p9h-95mh, GHSA-64mm-vxmg-q3vj, GHSA-9gqv-wp59-fq42, GHSA-c7qv-q95q-8v27, GHSA-4www-5p9h-95mh +15 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    js-yaml@3.14.1: 40 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +35 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    js-yaml@4.1.0: 40 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +35 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    launch-editor@2.9.1: 4 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-r825-w8mm-5pxw, GHSA-v6wh-96g9-6wx3
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    nanoid@3.3.7: 20 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-mwcw-c2x4-8c55, GHSA-xwg4-73v4-xw9w, GHSA-28wg-ghj8-5hjv +15 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    node-forge@1.3.1: 144 known vulnerabilities
    GHSA-2328-f5f3-gj25, GHSA-4487-j8r4-4g2f, GHSA-4642-5mcj-2rqw, GHSA-525v-9gp9-w22h, GHSA-554w-wpv2-vw27 +139 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    pacote@17.0.6: 1 known vulnerability
    GHSA-w4pp-8pjf-rmxw
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    path-to-regexp@0.1.10: 2 known vulnerabilities
    GHSA-37ch-88jc-xwx2, GHSA-rhx6-c78j-4q9w
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    path-to-regexp@3.2.0: 1 known vulnerability
    GHSA-9wv6-86v2-598j
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    picomatch@2.3.1: 16 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p +11 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    picomatch@4.0.1: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    postcss@8.4.35: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    rollup@4.21.3: 2 known vulnerabilities
    GHSA-gcx4-mw62-g8wm, GHSA-mw96-cpmx-2vgc
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    serialize-javascript@6.0.2: 24 known vulnerabilities
    GHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v, GHSA-qj8w-gfj5-8c6v, GHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v +19 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    socket.io-parser@4.2.4: 16 known vulnerabilities
    GHSA-2m8v-j782-fhvr, GHSA-677m-j7p3-52f9, GHSA-2m8v-j782-fhvr, GHSA-677m-j7p3-52f9, GHSA-2m8v-j782-fhvr +11 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    tmp@0.2.3: 16 known vulnerabilities
    GHSA-52f5-9888-hmc6, GHSA-ph9p-34f9-6g65, GHSA-52f5-9888-hmc6, GHSA-ph9p-34f9-6g65, GHSA-52f5-9888-hmc6 +11 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    undici@5.28.4: 18 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52, GHSA-4992-7rv2-5pvq, GHSA-8xcm-r25x-g524 +13 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    undici@6.11.1: 21 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52, GHSA-4992-7rv2-5pvq, GHSA-4qv8-2p9j-2685 +16 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    vite@5.1.7: 20 known vulnerabilities
    GHSA-356w-63v5-8wf4, GHSA-4r4m-qw57-chr8, GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-64vr-g452-qvp3 +15 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    webpack-dev-middleware@5.3.4: 8 known vulnerabilities
    GHSA-g84c-rxfj-3j2c, GHSA-g84c-rxfj-3j2c, GHSA-g84c-rxfj-3j2c, GHSA-g84c-rxfj-3j2c, GHSA-g84c-rxfj-3j2c +3 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    webpack-dev-middleware@6.1.2: 8 known vulnerabilities
    GHSA-g84c-rxfj-3j2c, GHSA-g84c-rxfj-3j2c, GHSA-g84c-rxfj-3j2c, GHSA-g84c-rxfj-3j2c, GHSA-g84c-rxfj-3j2c +3 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    ws@8.17.1: 16 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p, GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p, GHSA-58qx-3vcg-4xpx +11 more
    gemini/sample-apps/genwealth/ui/package-lock.json
  • medium
    google-cloud-aiplatform@1.87.0: 1 known vulnerability
    PYSEC-2026-2500
    gemini/sample-apps/photo-discovery/ag-web/app/requirements.txt
  • medium
    aiohttp@3.14.3: 8 known vulnerabilities
    GHSA-2g87-pp6c-29x5, GHSA-494j-54xm-rwp3, GHSA-5wr8-gcqf-gqf3, GHSA-6cjc-53gc-5rqm, GHSA-9xw5-w5jj-pvcg +3 more
    gemini/sample-apps/prism-science-explainer/uv.lock
  • medium
    google-cloud-aiplatform@1.69.0: 9 known vulnerabilities
    PYSEC-2026-2500, PYSEC-2026-2500, PYSEC-2026-2500, PYSEC-2026-2500, PYSEC-2026-2500 +4 more
    gemini/sample-apps/quickbot/conversational-app-multi-playbook/backend/requirements.txt

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Generative AI alternatives

View more →

Similar ai agents in Cloud Infrastructure, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Generative AI (this page)
GoogleCloudPlatform
18kApache-2.0Oct 30, 2026Scanned, no flagged issues
OmniRoute
cheaper-inference
83kMITNov 1, 2026Scanned, see report
Dsh Routing Suite
yjh051108
7kMITSep 18, 2026Scanned, no flagged issues
Intentkit
crestalnetwork
6.5kMITSep 16, 2026Scanned, no flagged issues
Open Agents
vercel-labs
5.9kMITAug 29, 2026Scanned, no flagged issues
Olares
beclab
5.3kAGPL-3.0Nov 1, 2026Scanned, see report