Generative AI AI Agent by GoogleCloudPlatform
Sample code and notebooks for Generative AI on Google Cloud, with Gemini Enterprise Agent Platform
Generative AI is an open-source ai agent by GoogleCloudPlatform, written mainly in Jupyter Notebook, with 17,835 GitHub stars and the Apache-2.0 license. Its code was last updated Oct 30, 2026.
Scan summary: scanned Nov 5, 2026 at commit ef43bc1. Seen able to run shell commands, run dynamic code. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
ef43bc1 · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit6024 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Buildn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (200)
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
search/gemini-enterprise/ge-demo-generator/skills/ge-demo-generator/templates/scripts/generate_and_upload_external_files.py:58 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.aiohttp@3.13.4: 44 known vulnerabilitiesPYSEC-2026-2104, PYSEC-2026-2105, PYSEC-2026-2106, PYSEC-2026-2107, PYSEC-2026-2108 +39 more
agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cryptography@48.0.0: 12 known vulnerabilitiesPYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554, GHSA-537c-gmf6-5ccf, PYSEC-2026-3552 +7 more
agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.29.0: 18 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9vhv-jxww-xfm5, GHSA-cwqr-hh33-gh44 +13 more
agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fsspec@2026.4.0: 2 known vulnerabilitiesPYSEC-2026-4217, PYSEC-2026-4217
agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httplib2@0.31.2: 3 known vulnerabilitiesPYSEC-2026-3444, PYSEC-2026-3444, PYSEC-2026-3444
agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.joserfc@1.6.5: 8 known vulnerabilitiesPYSEC-2026-2528, PYSEC-2026-2530, GHSA-9pg5-8c7x-5hfx, GHSA-jpxq-7h8p-2q76, PYSEC-2026-2528 +3 more
agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.27.1: 7 known vulnerabilitiesPYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more
agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyasn1@0.6.3: 35 known vulnerabilitiesPYSEC-2026-3455, PYSEC-2026-3456, PYSEC-2026-3457, GHSA-2qm8-x737-gmw5, GHSA-9m75-vc3g-4x39 +30 more
agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.29: 4 known vulnerabilitiesPYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3040, PYSEC-2026-3041
agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sqlparse@0.5.5: 25 known vulnerabilitiesPYSEC-2026-3696, PYSEC-2026-3697, PYSEC-2026-3698, PYSEC-2026-3699, PYSEC-2026-3923 +20 more
agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.52.1: 20 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248, PYSEC-2026-249 +15 more
agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.7.0: 18 known vulnerabilitiesPYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177, PYSEC-2026-4175, PYSEC-2026-4176 +13 more
agents/adk/contract-compliance-pipeline/python-extraction-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.google-cloud-aiplatform@1.71.1: 1 known vulnerabilityPYSEC-2026-2500
agents/invoice-processing/invoice_processing/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.9: 80 known vulnerabilitiesPYSEC-2026-1851, PYSEC-2026-1852, PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038 +75 more
agents/invoice-processing/invoice_processing/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.aiohttp@3.13.5: 44 known vulnerabilitiesPYSEC-2026-2104, PYSEC-2026-2105, PYSEC-2026-2106, PYSEC-2026-2107, PYSEC-2026-2108 +39 more
agents/invoice-processing/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cryptography@46.0.7: 4 known vulnerabilitiesPYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554, GHSA-537c-gmf6-5ccf
agents/invoice-processing/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mako@1.3.11: 2 known vulnerabilitiesPYSEC-2026-2617, PYSEC-2026-4243
agents/invoice-processing/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.27.0: 14 known vulnerabilitiesPYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +9 more
agents/invoice-processing/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.26: 5 known vulnerabilitiesPYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3039, PYSEC-2026-3040, PYSEC-2026-3041
agents/invoice-processing/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.6.3: 10 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-142, PYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177 +5 more
agents/invoice-processing/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.aiohttp@3.14.2: 9 known vulnerabilitiesPYSEC-2026-3545, GHSA-2g87-pp6c-29x5, GHSA-494j-54xm-rwp3, GHSA-5wr8-gcqf-gqf3, GHSA-6cjc-53gc-5rqm +4 more
agents/personalized-agent-swarms/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cryptography@49.0.0: 2 known vulnerabilitiesPYSEC-2026-3552, PYSEC-2026-3552
agents/personalized-agent-swarms/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.joserfc@1.7.4: 4 known vulnerabilitiesGHSA-9pg5-8c7x-5hfx, GHSA-jpxq-7h8p-2q76, GHSA-9pg5-8c7x-5hfx, GHSA-jpxq-7h8p-2q76
agents/personalized-agent-swarms/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyasn1@0.6.4: 12 known vulnerabilitiesGHSA-2qm8-x737-gmw5, GHSA-9m75-vc3g-4x39, GHSA-fm9c-5rcf-2q5p, GHSA-mm57-4v3p-rchx, GHSA-2qm8-x737-gmw5 +7 more
agents/personalized-agent-swarms/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.jupyter-core@5.7.2: 3 known vulnerabilitiesPYSEC-2026-1477, PYSEC-2026-1477, PYSEC-2026-1477
gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph@0.3.21: 2 known vulnerabilitiesPYSEC-2026-83, PYSEC-2026-83
gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph-checkpoint@2.0.23: 6 known vulnerabilitiesPYSEC-2026-1527, PYSEC-2026-2573, PYSEC-2026-2574, PYSEC-2026-1527, PYSEC-2026-2573 +1 more
gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph-checkpoint-sqlite@2.0.6: 5 known vulnerabilitiesPYSEC-2026-1528, PYSEC-2026-1529, PYSEC-2026-1530, PYSEC-2026-3636, GHSA-6hmw-9432-67qq
gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph-sdk@0.1.60: 2 known vulnerabilitiesPYSEC-2026-2575, PYSEC-2026-4240
gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langsmith@0.3.19: 6 known vulnerabilitiesPYSEC-2026-2582, PYSEC-2026-2583, GHSA-f4xh-w4cj-qxq8, PYSEC-2026-2582, PYSEC-2026-2583 +1 more
gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.orjson@3.10.16: 2 known vulnerabilitiesPYSEC-2026-107, PYSEC-2026-107
gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.protobuf@5.29.4: 6 known vulnerabilitiesPYSEC-2026-1805, PYSEC-2026-1806, PYSEC-2026-1805, PYSEC-2026-1806, PYSEC-2026-1805 +1 more
gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyarrow@19.0.1: 2 known vulnerabilitiesPYSEC-2026-113, PYSEC-2026-113
gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyasn1@0.6.1: 45 known vulnerabilitiesPYSEC-2026-1810, PYSEC-2026-2263, PYSEC-2026-3455, PYSEC-2026-3456, PYSEC-2026-3457 +40 more
gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.46.1: 7 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-1941, PYSEC-2026-1942, PYSEC-2026-2280, PYSEC-2026-2281 +2 more
gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tornado@6.4.2: 54 known vulnerabilitiesPYSEC-2025-265, PYSEC-2025-266, PYSEC-2025-267, PYSEC-2026-140, PYSEC-2026-1974 +49 more
gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.3.0: 24 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-1994, PYSEC-2026-1996, PYSEC-2026-1997, PYSEC-2026-1998 +19 more
gemini/agents/genai-experience-concierge/langgraph-demo/backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph-sdk@0.1.59: 2 known vulnerabilitiesPYSEC-2026-2575, PYSEC-2026-4240
gemini/agents/genai-experience-concierge/langgraph-demo/frontend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pip@25.0.1: 6 known vulnerabilitiesPYSEC-2026-1795, PYSEC-2026-1796, PYSEC-2026-196, PYSEC-2026-2875, PYSEC-2026-2876 +1 more
gemini/agents/genai-experience-concierge/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.virtualenv@20.29.3: 20 known vulnerabilitiesPYSEC-2026-2009, PYSEC-2026-4011, PYSEC-2026-4012, PYSEC-2026-4013, PYSEC-2026-4014 +15 more
gemini/agents/genai-experience-concierge/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.google-cloud-aiplatform@1.95.0: 2 known vulnerabilitiesPYSEC-2026-2500, PYSEC-2026-2500
gemini/mcp/adk_mcp_app/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httplib2@0.22.0: 2 known vulnerabilitiesPYSEC-2026-3444, PYSEC-2026-3444
gemini/mcp/adk_mcp_app/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.9.1: 14 known vulnerabilitiesPYSEC-2026-1616, PYSEC-2026-1617, PYSEC-2026-1618, PYSEC-2026-3482, PYSEC-2026-3483 +9 more
gemini/mcp/adk_mcp_app/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.protobuf@5.29.5: 3 known vulnerabilitiesPYSEC-2026-1805, PYSEC-2026-1805, PYSEC-2026-1805
gemini/mcp/adk_mcp_app/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.20: 14 known vulnerabilitiesPYSEC-2026-1852, PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038, PYSEC-2026-3039 +9 more
gemini/mcp/adk_mcp_app/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.46.2: 21 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-1941, PYSEC-2026-1942, PYSEC-2026-2280, PYSEC-2026-2281 +16 more
gemini/mcp/adk_mcp_app/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.4.0: 16 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-1994, PYSEC-2026-1996, PYSEC-2026-1997, PYSEC-2026-1998 +11 more
gemini/mcp/adk_mcp_app/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.27: 4 known vulnerabilitiesPYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3040, PYSEC-2026-3041
gemini/multimodal-live-api/livekit-adk/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.12: 28 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +23 more
gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.28.0: 8 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx, GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx, GHSA-73wf-gq98-2v4g +3 more
gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.flatted@3.3.3: 8 known vulnerabilitiesGHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh, GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh, GHSA-25h7-pfq9-p65f +3 more
gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.1: 16 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-2883-xcg3-v3hh +11 more
gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@3.1.2: 36 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +31 more
gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.11: 12 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w, GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8 +7 more
gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@4.0.3: 8 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p +3 more
gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.6: 16 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849, GHSA-6g55-p6wh-862q +11 more
gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rollup@4.53.2: 4 known vulnerabilitiesGHSA-mw96-cpmx-2vgc, GHSA-mw96-cpmx-2vgc, GHSA-mw96-cpmx-2vgc, GHSA-mw96-cpmx-2vgc
gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 10 known vulnerabilitiesGHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q +5 more
gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@7.2.2: 40 known vulnerabilitiesGHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +35 more
gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.1.12: 4 known vulnerabilitiesGHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
gemini/multimodal-live-api/native-audio-websocket-demo-apps/customer-support-demo-app/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.protobuf@4.25.9: 9 known vulnerabilitiesPYSEC-2026-1805, PYSEC-2026-1805, PYSEC-2026-1805, PYSEC-2026-1805, PYSEC-2026-1805 +4 more
gemini/multimodal-live-api/project-livewire/server/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cryptography@48.0.1: 3 known vulnerabilitiesPYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554
gemini/multimodal-live-api/shopping-avatar/ecommerce/backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@1.2.1: 4 known vulnerabilitiesPYSEC-2026-248, PYSEC-2026-249, PYSEC-2026-248, PYSEC-2026-249
gemini/multimodal-live-api/shopping-avatar/ecommerce/backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.axios@1.17.0: 22 known vulnerabilitiesGHSA-3pq3-5fj3-cg6v, GHSA-42h9-826w-cgv3, GHSA-44g4-m2mj-wpvx, GHSA-4hqw-qxg8-jxx2, GHSA-542g-h47m-68v8 +17 more
gemini/multimodal-live-api/shopping-avatar/ecommerce/frontend/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@5.0.6: 6 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
gemini/multimodal-live-api/shopping-avatar/ecommerce/frontend/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.28.2: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
gemini/multimodal-live-api/shopping-avatar/ecommerce/frontend/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.follow-redirects@1.16.0: 3 known vulnerabilitiesGHSA-8r9p-f939-6h3c, GHSA-mrwp-f3q8-3g9p, GHSA-q3jh-wrc6-jgq8
gemini/multimodal-live-api/shopping-avatar/ecommerce/frontend/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.form-data@4.0.5: 1 known vulnerabilityGHSA-hmw2-7cc7-3qxx
gemini/multimodal-live-api/shopping-avatar/ecommerce/frontend/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.12: 2 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8
gemini/multimodal-live-api/shopping-avatar/ecommerce/frontend/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.15: 2 known vulnerabilitiesGHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849
gemini/multimodal-live-api/shopping-avatar/ecommerce/frontend/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@8.0.16: 5 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22
gemini/multimodal-live-api/shopping-avatar/ecommerce/frontend/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.4.3: 2 known vulnerabilitiesGHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
gemini/multimodal-live-api/shopping-avatar/ecommerce/frontend/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.orjson@3.9.9: 2 known vulnerabilitiesPYSEC-2024-40, PYSEC-2026-107
gemini/sample-apps/gemini-live-telephony-app/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.37.2: 56 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-1941, PYSEC-2026-1943, PYSEC-2026-2280, PYSEC-2026-2281 +51 more
gemini/sample-apps/gemini-live-telephony-app/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@grpc/grpc-js@1.10.11: 4 known vulnerabilitiesGHSA-5375-pq7m-f5r2, GHSA-99f4-grh7-6pcq, GHSA-f596-whhp-79r4, GHSA-m9gg-hp2v-232j
gemini/sample-apps/genwealth/api/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@1.20.2: 15 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-qwcr-r2fm-qrc7, GHSA-v422-hmwv-36x6, GHSA-27r3-jxmh-p828, GHSA-qwcr-r2fm-qrc7 +10 more
gemini/sample-apps/genwealth/api/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.0.1: 72 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +67 more
gemini/sample-apps/genwealth/api/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cross-spawn@7.0.3: 9 known vulnerabilitiesGHSA-3xgq-45jj-v275, GHSA-3xgq-45jj-v275, GHSA-3xgq-45jj-v275, GHSA-3xgq-45jj-v275, GHSA-3xgq-45jj-v275 +4 more
gemini/sample-apps/genwealth/api/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.0.1: 12 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
gemini/sample-apps/genwealth/api/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.glob@10.4.5: 10 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2, GHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2, GHSA-3g3m-2fjr-6pw4 +5 more
gemini/sample-apps/genwealth/api/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ip-address@9.0.5: 54 known vulnerabilitiesGHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +49 more
gemini/sample-apps/genwealth/api/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.jws@4.0.0: 9 known vulnerabilitiesGHSA-869p-cjfg-cm3x, GHSA-869p-cjfg-cm3x, GHSA-869p-cjfg-cm3x, GHSA-869p-cjfg-cm3x, GHSA-869p-cjfg-cm3x +4 more
gemini/sample-apps/genwealth/api/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash@4.17.21: 18 known vulnerabilitiesGHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg, GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg, GHSA-r5fr-rjxr-66jc +13 more
gemini/sample-apps/genwealth/api/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@9.0.5: 36 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249, GHSA-23c5-xmqv-rm74 +31 more
gemini/sample-apps/genwealth/api/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.multer@1.4.5-lts.1: 11 known vulnerabilitiesGHSA-44fp-w29j-9vj5, GHSA-4pg4-qvpc-4q3h, GHSA-535w-7cp7-47q4, GHSA-5528-5vmv-3xc2, GHSA-72gw-mp4g-v24j +6 more
gemini/sample-apps/genwealth/api/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pacote@18.0.6: 1 known vulnerabilityGHSA-w4pp-8pjf-rmxw
gemini/sample-apps/genwealth/api/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.path-to-regexp@0.1.7: 16 known vulnerabilitiesGHSA-37ch-88jc-xwx2, GHSA-rhx6-c78j-4q9w, GHSA-37ch-88jc-xwx2, GHSA-rhx6-c78j-4q9w, GHSA-37ch-88jc-xwx2 +11 more
gemini/sample-apps/genwealth/api/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@4.0.2: 2 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
gemini/sample-apps/genwealth/api/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sigstore@2.3.1: 2 known vulnerabilitiesGHSA-52v5-jr5w-gjxr, GHSA-52v5-jr5w-gjxr
gemini/sample-apps/genwealth/api/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tmp@0.0.33: 18 known vulnerabilitiesGHSA-52f5-9888-hmc6, GHSA-ph9p-34f9-6g65, GHSA-52f5-9888-hmc6, GHSA-ph9p-34f9-6g65, GHSA-52f5-9888-hmc6 +13 more
gemini/sample-apps/genwealth/api/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@8.3.2: 9 known vulnerabilitiesGHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq +4 more
gemini/sample-apps/genwealth/api/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@9.0.1: 9 known vulnerabilitiesGHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq +4 more
gemini/sample-apps/genwealth/api/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.google-cloud-aiplatform@1.99.0: 2 known vulnerabilitiesPYSEC-2026-2499, PYSEC-2026-2500
gemini/sample-apps/genwealth/function-scripts/analyze-prospectus/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langsmith@0.3.9: 3 known vulnerabilitiesPYSEC-2026-2582, PYSEC-2026-2583, GHSA-f4xh-w4cj-qxq8
gemini/sample-apps/genwealth/function-scripts/analyze-prospectus/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.orjson@3.9.15: 5 known vulnerabilitiesPYSEC-2026-107, PYSEC-2026-107, PYSEC-2026-107, PYSEC-2026-107, PYSEC-2026-107
gemini/sample-apps/genwealth/function-scripts/analyze-prospectus/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langchain@0.3.15: 2 known vulnerabilitiesPYSEC-2026-2192, PYSEC-2026-2555
gemini/sample-apps/genwealth/function-scripts/process-pdf/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@angular/common@17.3.12: 8 known vulnerabilitiesGHSA-39pv-4j6c-2g6v, GHSA-48r7-hpm6-gfxm, GHSA-58c5-g7wp-6w37, GHSA-jfgx-762w-99vr, GHSA-jhpw-976m-542j +3 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@angular/router@17.3.12: 2 known vulnerabilitiesGHSA-62vg-58rm-qff7, GHSA-ff3f-86qr-9cv3
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@babel/plugin-transform-modules-systemjs@7.25.0: 1 known vulnerabilityGHSA-fv7c-fp4j-7gwp
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@fastify/busboy@2.1.1: 2 known vulnerabilitiesGHSA-gxm5-99cw-xjw9, GHSA-x8mw-p69m-v3mx
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.axios@1.7.4: 33 known vulnerabilitiesGHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3w6x-2g7m-8v23, GHSA-42h9-826w-cgv3 +28 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@1.20.3: 10 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6, GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6, GHSA-27r3-jxmh-p828 +5 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.11: 64 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +59 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.23.3: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.compression@1.7.4: 8 known vulnerabilitiesGHSA-vc2v-76pw-4v95, GHSA-vc2v-76pw-4v95, GHSA-vc2v-76pw-4v95, GHSA-vc2v-76pw-4v95, GHSA-vc2v-76pw-4v95 +3 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.engine.io@6.5.5: 10 known vulnerabilitiesGHSA-gr94-w7qr-f4j3, GHSA-r635-g3xr-vw7x, GHSA-gr94-w7qr-f4j3, GHSA-r635-g3xr-vw7x, GHSA-gr94-w7qr-f4j3 +5 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.flatted@3.3.1: 10 known vulnerabilitiesGHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh, GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh, GHSA-25h7-pfq9-p65f +5 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.http-proxy-middleware@2.0.6: 20 known vulnerabilitiesGHSA-4www-5p9h-95mh, GHSA-64mm-vxmg-q3vj, GHSA-9gqv-wp59-fq42, GHSA-c7qv-q95q-8v27, GHSA-4www-5p9h-95mh +15 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@3.14.1: 40 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +35 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.0: 40 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +35 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.launch-editor@2.9.1: 4 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-r825-w8mm-5pxw, GHSA-v6wh-96g9-6wx3
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.7: 20 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-mwcw-c2x4-8c55, GHSA-xwg4-73v4-xw9w, GHSA-28wg-ghj8-5hjv +15 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.node-forge@1.3.1: 144 known vulnerabilitiesGHSA-2328-f5f3-gj25, GHSA-4487-j8r4-4g2f, GHSA-4642-5mcj-2rqw, GHSA-525v-9gp9-w22h, GHSA-554w-wpv2-vw27 +139 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pacote@17.0.6: 1 known vulnerabilityGHSA-w4pp-8pjf-rmxw
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.path-to-regexp@0.1.10: 2 known vulnerabilitiesGHSA-37ch-88jc-xwx2, GHSA-rhx6-c78j-4q9w
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.path-to-regexp@3.2.0: 1 known vulnerabilityGHSA-9wv6-86v2-598j
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@2.3.1: 16 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p +11 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@4.0.1: 2 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.4.35: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rollup@4.21.3: 2 known vulnerabilitiesGHSA-gcx4-mw62-g8wm, GHSA-mw96-cpmx-2vgc
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.serialize-javascript@6.0.2: 24 known vulnerabilitiesGHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v, GHSA-qj8w-gfj5-8c6v, GHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v +19 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.socket.io-parser@4.2.4: 16 known vulnerabilitiesGHSA-2m8v-j782-fhvr, GHSA-677m-j7p3-52f9, GHSA-2m8v-j782-fhvr, GHSA-677m-j7p3-52f9, GHSA-2m8v-j782-fhvr +11 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tmp@0.2.3: 16 known vulnerabilitiesGHSA-52f5-9888-hmc6, GHSA-ph9p-34f9-6g65, GHSA-52f5-9888-hmc6, GHSA-ph9p-34f9-6g65, GHSA-52f5-9888-hmc6 +11 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@5.28.4: 18 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52, GHSA-4992-7rv2-5pvq, GHSA-8xcm-r25x-g524 +13 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@6.11.1: 21 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52, GHSA-4992-7rv2-5pvq, GHSA-4qv8-2p9j-2685 +16 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@5.1.7: 20 known vulnerabilitiesGHSA-356w-63v5-8wf4, GHSA-4r4m-qw57-chr8, GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-64vr-g452-qvp3 +15 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.webpack-dev-middleware@5.3.4: 8 known vulnerabilitiesGHSA-g84c-rxfj-3j2c, GHSA-g84c-rxfj-3j2c, GHSA-g84c-rxfj-3j2c, GHSA-g84c-rxfj-3j2c, GHSA-g84c-rxfj-3j2c +3 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.webpack-dev-middleware@6.1.2: 8 known vulnerabilitiesGHSA-g84c-rxfj-3j2c, GHSA-g84c-rxfj-3j2c, GHSA-g84c-rxfj-3j2c, GHSA-g84c-rxfj-3j2c, GHSA-g84c-rxfj-3j2c +3 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.17.1: 16 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p, GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p, GHSA-58qx-3vcg-4xpx +11 more
gemini/sample-apps/genwealth/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.google-cloud-aiplatform@1.87.0: 1 known vulnerabilityPYSEC-2026-2500
gemini/sample-apps/photo-discovery/ag-web/app/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.aiohttp@3.14.3: 8 known vulnerabilitiesGHSA-2g87-pp6c-29x5, GHSA-494j-54xm-rwp3, GHSA-5wr8-gcqf-gqf3, GHSA-6cjc-53gc-5rqm, GHSA-9xw5-w5jj-pvcg +3 more
gemini/sample-apps/prism-science-explainer/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.google-cloud-aiplatform@1.69.0: 9 known vulnerabilitiesPYSEC-2026-2500, PYSEC-2026-2500, PYSEC-2026-2500, PYSEC-2026-2500, PYSEC-2026-2500 +4 more
gemini/sample-apps/quickbot/conversational-app-multi-playbook/backend/requirements.txt
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Generative AI alternatives
View more →Similar ai agents in Cloud Infrastructure, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Generative AI (this page) GoogleCloudPlatform | 18k | Apache-2.0 | Oct 30, 2026 | Scanned, no flagged issues |
| OmniRoute cheaper-inference | 83k | MIT | Nov 1, 2026 | Scanned, see report |
| Dsh Routing Suite yjh051108 | 7k | MIT | Sep 18, 2026 | Scanned, no flagged issues |
| Intentkit crestalnetwork | 6.5k | MIT | Sep 16, 2026 | Scanned, no flagged issues |
| Open Agents vercel-labs | 5.9k | MIT | Aug 29, 2026 | Scanned, no flagged issues |
| Olares beclab | 5.3k | AGPL-3.0 | Nov 1, 2026 | Scanned, see report |