Sample Agentic Frameworks On AWS AI Agent
by aws-samplesBuild Agentic AI solutions on AWS, using latest OSS Agentic Frameworks.
Sample Agentic Frameworks On AWS is an open-source ai agent by aws-samples, written mainly in Jupyter Notebook, with 266 GitHub stars and the MIT-0 license. Its code was last updated Jun 2, 2026.
Scan summary: scanned Nov 5, 2026 at commit ba6d0e1. Seen able to run shell commands, run dynamic code, connect to the internet. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
ba6d0e1 · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit1723 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Buildn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (193)
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
agent-harness/pi-mono-claw/agent.py:460 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Turns off TLS certificate checking, allowing traffic interception.
langchain/cybersecurity-ai-platform/core/bedrock_client.py:20 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Contacts a hard-coded IP address instead of a domain name.
strands-agents/DeepResearch/mcp-clients/llama4/llama4-DeepResearch-strands-ollama-UI.py:61 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Contacts a hard-coded IP address instead of a domain name.
strands-agents/DeepResearch/mcp-clients/llama4/llama4-DeepResearch-strands-ollama.py:68 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cryptography@44.0.2: 6 known vulnerabilitiesPYSEC-2026-2141, PYSEC-2026-35, PYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554 +1 more
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.google-cloud-aiplatform@1.87.0: 1 known vulnerabilityPYSEC-2026-2500
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httplib2@0.22.0: 1 known vulnerabilityPYSEC-2026-3444
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph@0.3.18: 1 known vulnerabilityPYSEC-2026-83
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph-checkpoint@2.0.21: 3 known vulnerabilitiesPYSEC-2026-1527, PYSEC-2026-2573, PYSEC-2026-2574
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph-sdk@0.1.58: 2 known vulnerabilitiesPYSEC-2026-2575, PYSEC-2026-4240
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langsmith@0.3.18: 3 known vulnerabilitiesPYSEC-2026-2582, PYSEC-2026-2583, GHSA-f4xh-w4cj-qxq8
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.6.0: 5 known vulnerabilitiesPYSEC-2026-1616, PYSEC-2026-1617, PYSEC-2026-1618, PYSEC-2026-3482, PYSEC-2026-3483
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.msgpack@1.1.0: 2 known vulnerabilitiesPYSEC-2026-3625, GHSA-j586-36cw-2gc2
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.orjson@3.10.15: 1 known vulnerabilityPYSEC-2026-107
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.protobuf@5.29.4: 2 known vulnerabilitiesPYSEC-2026-1805, PYSEC-2026-1806
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyarrow@19.0.1: 1 known vulnerabilityPYSEC-2026-113
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyasn1@0.6.1: 63 known vulnerabilitiesPYSEC-2026-1810, PYSEC-2026-2263, PYSEC-2026-3455, PYSEC-2026-3456, PYSEC-2026-3457 +58 more
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.46.1: 7 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-1941, PYSEC-2026-1942, PYSEC-2026-2280, PYSEC-2026-2281 +2 more
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tornado@6.4.2: 18 known vulnerabilitiesPYSEC-2025-265, PYSEC-2025-266, PYSEC-2025-267, PYSEC-2026-140, PYSEC-2026-1974 +13 more
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.3.0: 8 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-1994, PYSEC-2026-1996, PYSEC-2026-1997, PYSEC-2026-1998 +3 more
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.strands-agents@0.1.0: 3 known vulnerabilitiesGHSA-3w55-933p-8pv5, GHSA-4v6f-7vjh-6x4m, GHSA-763v-5pjm-fx36
a2a-protocol/a2a-advisory-trading/iac/a2a_core/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.9.4: 6 known vulnerabilitiesPYSEC-2026-1617, PYSEC-2026-1618, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j +1 more
a2a-protocol/a2a-advisory-trading/iac/a2a_core/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.9: 16 known vulnerabilitiesPYSEC-2026-1851, PYSEC-2026-1852, PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038 +11 more
a2a-protocol/a2a-advisory-trading/iac/a2a_core/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.aiomysql@0.2.0: 4 known vulnerabilitiesPYSEC-2026-1110, PYSEC-2026-1110, PYSEC-2026-1110, PYSEC-2026-1110
eks/agents/a2a/agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.20.0: 7 known vulnerabilitiesPYSEC-2026-1617, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more
eks/agents/a2a/agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.protobuf@6.32.1: 2 known vulnerabilitiesPYSEC-2026-1805, PYSEC-2026-1805
eks/agents/a2a/agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.20: 49 known vulnerabilitiesPYSEC-2026-1852, PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038, PYSEC-2026-3039 +44 more
eks/agents/a2a/agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.soupsieve@2.8: 16 known vulnerabilitiesPYSEC-2026-3071, PYSEC-2026-3072, PYSEC-2026-4170, PYSEC-2026-4171, PYSEC-2026-3071 +11 more
eks/agents/a2a/agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.48.0: 18 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-1942, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248 +13 more
eks/agents/a2a/agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.strands-agents@1.15.0: 6 known vulnerabilitiesGHSA-3w55-933p-8pv5, GHSA-4v6f-7vjh-6x4m, GHSA-763v-5pjm-fx36, GHSA-3w55-933p-8pv5, GHSA-4v6f-7vjh-6x4m +1 more
eks/agents/a2a/agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.5.0: 42 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-1994, PYSEC-2026-1996, PYSEC-2026-1998, PYSEC-2026-4175 +37 more
eks/agents/a2a/agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.protobuf@6.33.1: 2 known vulnerabilitiesPYSEC-2026-1805, PYSEC-2026-1805
eks/agents/a2a/client/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.17.0: 7 known vulnerabilitiesPYSEC-2026-1617, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more
eks/agents/a2a/multi-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lxml@6.0.0: 2 known vulnerabilitiesPYSEC-2026-87, PYSEC-2026-87
eks/agents/travel/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.12.0: 7 known vulnerabilitiesPYSEC-2026-1617, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more
eks/agents/travel/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.protobuf@5.29.5: 2 known vulnerabilitiesPYSEC-2026-1805, PYSEC-2026-1805
eks/agents/travel/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.soupsieve@2.7: 8 known vulnerabilitiesPYSEC-2026-3071, PYSEC-2026-3072, PYSEC-2026-4170, PYSEC-2026-4171, PYSEC-2026-3071 +3 more
eks/agents/travel/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.47.1: 7 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-1941, PYSEC-2026-1942, PYSEC-2026-2280, PYSEC-2026-2281 +2 more
eks/agents/travel/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.strands-agents@1.3.0: 6 known vulnerabilitiesGHSA-3w55-933p-8pv5, GHSA-4v6f-7vjh-6x4m, GHSA-763v-5pjm-fx36, GHSA-3w55-933p-8pv5, GHSA-4v6f-7vjh-6x4m +1 more
eks/agents/travel/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.12.1: 14 known vulnerabilitiesPYSEC-2026-1617, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +9 more
eks/agents/weather/mcp-servers/weather-mcp-server/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.47.2: 18 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-1942, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248 +13 more
eks/agents/weather/mcp-servers/weather-mcp-server/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fsspec@2025.7.0: 1 known vulnerabilityPYSEC-2026-4217
eks/ui/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.gradio@5.38.2: 7 known vulnerabilitiesPYSEC-2026-211, PYSEC-2026-2178, PYSEC-2026-2179, PYSEC-2026-63, PYSEC-2026-64 +2 more
eks/ui/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.orjson@3.11.1: 1 known vulnerabilityPYSEC-2026-107
eks/ui/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.black@26.5.1: 1 known vulnerabilityGHSA-cg8m-r9f2-5wm2
langchain/cybersecurity-ai-platform/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httpcore2@2.9.1: 2 known vulnerabilitiesPYSEC-2026-3844, PYSEC-2026-3844
langchain/cybersecurity-ai-platform/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httpx2@2.9.1: 10 known vulnerabilitiesPYSEC-2026-3845, PYSEC-2026-3846, PYSEC-2026-3847, PYSEC-2026-3848, PYSEC-2026-3849 +5 more
langchain/cybersecurity-ai-platform/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.requests@2.9.2: 5 known vulnerabilitiesPYSEC-2018-28, PYSEC-2023-74, PYSEC-2026-1872, PYSEC-2026-1873, PYSEC-2026-2275
langchain/cybersecurity-ai-platform/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.azure-core@1.36.0: 1 known vulnerabilityPYSEC-2026-1208
langchain/deep-research/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cryptography@44.0.3: 12 known vulnerabilitiesPYSEC-2026-2141, PYSEC-2026-35, PYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554 +7 more
langchain/deep-research/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.google-cloud-aiplatform@1.128.0: 2 known vulnerabilitiesPYSEC-2026-2499, PYSEC-2026-2500
langchain/deep-research/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langchain-classic@1.0.0: 2 known vulnerabilitiesPYSEC-2026-2560, PYSEC-2026-2560
langchain/deep-research/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph@1.0.3: 1 known vulnerabilityPYSEC-2026-83
langchain/deep-research/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph-api@0.5.16: 3 known vulnerabilitiesPYSEC-2026-3857, PYSEC-2026-3858, GHSA-4hm6-w6qq-w73v
langchain/deep-research/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph-sdk@0.2.9: 4 known vulnerabilitiesPYSEC-2026-2575, PYSEC-2026-4240, PYSEC-2026-2575, PYSEC-2026-4240
langchain/deep-research/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langsmith@0.4.43: 4 known vulnerabilitiesPYSEC-2026-2582, PYSEC-2026-2583, PYSEC-2026-2584, GHSA-f4xh-w4cj-qxq8
langchain/deep-research/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lxml@6.0.2: 1 known vulnerabilityPYSEC-2026-87
langchain/deep-research/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.21.2: 7 known vulnerabilitiesPYSEC-2026-1617, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more
langchain/deep-research/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.oauthlib@3.3.1: 8 known vulnerabilitiesPYSEC-2026-4113, PYSEC-2026-4114, GHSA-3jp2-3mrg-2vxc, GHSA-7984-qgvg-3j9c, PYSEC-2026-4113 +3 more
langchain/deep-research/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.orjson@3.11.4: 1 known vulnerabilityPYSEC-2026-107
langchain/deep-research/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyarrow@21.0.0: 1 known vulnerabilityPYSEC-2026-113
langchain/deep-research/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.50.0: 5 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248, PYSEC-2026-249
langchain/deep-research/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tornado@6.5.2: 34 known vulnerabilitiesPYSEC-2025-265, PYSEC-2025-266, PYSEC-2025-267, PYSEC-2026-140, PYSEC-2026-2287 +29 more
langchain/deep-research/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.12: 7 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
langchain/financial-agent/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.0.2: 7 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
langchain/financial-agent/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.28.0: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
langchain/financial-agent/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.flatted@3.3.1: 2 known vulnerabilitiesGHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
langchain/financial-agent/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.form-data@4.0.4: 1 known vulnerabilityGHSA-hmw2-7cc7-3qxx
langchain/financial-agent/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.1: 4 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
langchain/financial-agent/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash@4.17.23: 2 known vulnerabilitiesGHSA-f23m-r3pf-42rh, GHSA-r5fr-rjxr-66jc
langchain/financial-agent/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@3.1.2: 3 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
langchain/financial-agent/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@9.0.5: 4 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
langchain/financial-agent/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.11: 3 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
langchain/financial-agent/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@2.3.1: 2 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
langchain/financial-agent/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.4.31: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
langchain/financial-agent/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.4.47: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
langchain/financial-agent/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sharp@0.34.5: 3 known vulnerabilitiesGHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
langchain/financial-agent/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 1 known vulnerabilityGHSA-68fv-2mgg-jv7q
langchain/financial-agent/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@9.0.1: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
langchain/financial-agent/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.1.12: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
langchain/financial-agent/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fsspec@2025.9.0: 1 known vulnerabilityPYSEC-2026-4217
langchain/shopping-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph@1.0.1: 1 known vulnerabilityPYSEC-2026-83
langchain/shopping-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langgraph-api@0.5.24: 3 known vulnerabilitiesPYSEC-2026-3857, PYSEC-2026-3858, GHSA-4hm6-w6qq-w73v
langchain/shopping-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.langsmith@0.4.37: 4 known vulnerabilitiesPYSEC-2026-2582, PYSEC-2026-2583, PYSEC-2026-2584, GHSA-f4xh-w4cj-qxq8
langchain/shopping-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mistune@3.1.4: 17 known vulnerabilitiesPYSEC-2026-168, PYSEC-2026-2206, PYSEC-2026-2207, PYSEC-2026-2208, PYSEC-2026-2209 +12 more
langchain/shopping-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nbconvert@7.16.6: 4 known vulnerabilitiesPYSEC-2026-1691, PYSEC-2026-2229, PYSEC-2026-2230, GHSA-pjvx-prjx-h659
langchain/shopping-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.orjson@3.11.3: 1 known vulnerabilityPYSEC-2026-107
langchain/shopping-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyasn1@0.6.2: 8 known vulnerabilitiesPYSEC-2026-2263, PYSEC-2026-3455, PYSEC-2026-3456, PYSEC-2026-3457, GHSA-2qm8-x737-gmw5 +3 more
langchain/shopping-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@1.26.20: 7 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-1994, PYSEC-2026-1996, PYSEC-2026-1998, PYSEC-2026-1999 +2 more
langchain/shopping-agent/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.bedrock-agentcore@1.3.2: 2 known vulnerabilitiesPYSEC-2026-2395, PYSEC-2026-3551
llamaindex/agentcore-kyc-workflow/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.52.1: 5 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248, PYSEC-2026-249
llamaindex/agentcore-kyc-workflow/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.6.3: 5 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-142, PYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177
llamaindex/agentcore-kyc-workflow/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.idna@3.10: 7 known vulnerabilitiesPYSEC-2026-215, PYSEC-2026-215, PYSEC-2026-215, PYSEC-2026-215, PYSEC-2026-215 +2 more
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.jwcrypto@1.5.6: 1 known vulnerabilityPYSEC-2026-70
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.31.1: 1 known vulnerabilityGHSA-xcq7-p3pf-p88h
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pytest@8.3.5: 1 known vulnerabilityPYSEC-2026-1845
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.python-dotenv@1.1.0: 1 known vulnerabilityPYSEC-2026-2270
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.requests@2.32.3: 2 known vulnerabilitiesPYSEC-2026-1872, PYSEC-2026-2275
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.streamlit@1.44.0: 2 known vulnerabilitiesPYSEC-2026-212, PYSEC-2026-2285
a2a-protocol/A2A-Protocol-Bedrock-Agents/samples/python/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.idna@3.9.0: 2 known vulnerabilitiesPYSEC-2026-215, PYSEC-2026-215
a2a-protocol/a2a-advisory-trading/iac/a2a_core/requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.multidict@6.7.0: 4 known vulnerabilitiesPYSEC-2026-4244, PYSEC-2026-4244, PYSEC-2026-4244, PYSEC-2026-4244
eks/agents/a2a/agent/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.37.0: 2 known vulnerabilitiesGHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h
eks/agents/a2a/agent/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pygments@2.19.2: 8 known vulnerabilitiesPYSEC-2026-2987, PYSEC-2026-2987, PYSEC-2026-2987, PYSEC-2026-2987, PYSEC-2026-2987 +3 more
eks/agents/a2a/agent/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.python-dotenv@1.1.1: 5 known vulnerabilitiesPYSEC-2026-2270, PYSEC-2026-2270, PYSEC-2026-2270, PYSEC-2026-2270, PYSEC-2026-2270
eks/agents/a2a/agent/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.requests@2.32.5: 5 known vulnerabilitiesPYSEC-2026-2275, PYSEC-2026-2275, PYSEC-2026-2275, PYSEC-2026-2275, PYSEC-2026-2275
eks/agents/a2a/agent/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.idna@3.11: 4 known vulnerabilitiesPYSEC-2026-215, PYSEC-2026-215, PYSEC-2026-215, PYSEC-2026-215
eks/agents/a2a/client/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.35.0: 2 known vulnerabilitiesGHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h
eks/agents/travel/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.python-dotenv@1.0.1: 2 known vulnerabilitiesPYSEC-2026-2270, PYSEC-2026-2270
eks/agents/travel/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.requests@2.32.4: 3 known vulnerabilitiesPYSEC-2026-2275, PYSEC-2026-2275, PYSEC-2026-2275
eks/agents/travel/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.geopy@2.4.1: 1 known vulnerabilityPYSEC-2026-4218
eks/agents/weather/mcp-servers/weather-mcp-server/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.filelock@3.18.0: 4 known vulnerabilitiesPYSEC-2026-1374, PYSEC-2026-1375, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g
eks/ui/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.h2@4.3.0: 1 known vulnerabilityPYSEC-2026-3628
langchain/deep-research/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.hpack@4.1.0: 1 known vulnerabilityPYSEC-2026-4053
langchain/deep-research/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.langchain@1.0.8: 1 known vulnerabilityPYSEC-2026-2192
langchain/deep-research/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.langchain-anthropic@1.1.0: 1 known vulnerabilityPYSEC-2026-2556
langchain/deep-research/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.langchain-openai@1.0.3: 1 known vulnerabilityPYSEC-2026-76
langchain/deep-research/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.langchain-text-splitters@1.0.0: 2 known vulnerabilitiesPYSEC-2026-77, PYSEC-2026-77
langchain/deep-research/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.langgraph-checkpoint@3.0.1: 4 known vulnerabilitiesPYSEC-2026-2573, PYSEC-2026-2574, PYSEC-2026-2573, PYSEC-2026-2574
langchain/deep-research/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.marshmallow@3.26.1: 2 known vulnerabilitiesPYSEC-2026-1605, PYSEC-2026-1605
langchain/deep-research/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.38.0: 2 known vulnerabilitiesGHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h
langchain/deep-research/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pydantic-settings@2.12.0: 1 known vulnerabilityGHSA-4xgf-cpjx-pc3j
langchain/deep-research/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pymupdf@1.26.6: 1 known vulnerabilityPYSEC-2026-3001
langchain/deep-research/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pytest@9.0.1: 1 known vulnerabilityPYSEC-2026-1845
langchain/deep-research/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.python-dotenv@1.2.1: 1 known vulnerabilityPYSEC-2026-2270
langchain/deep-research/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.setuptools@80.9.0: 4 known vulnerabilitiesPYSEC-2026-3447, GHSA-xmj3-9gf7-h52w, PYSEC-2026-3447, GHSA-xmj3-9gf7-h52w
langchain/deep-research/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.28.5: 1 known vulnerabilityGHSA-4x5r-pxfx-6jf8
langchain/financial-agent/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@smithy/config-resolver@3.0.10: 1 known vulnerabilityGHSA-6475-r3vj-m8vf
langchain/financial-agent/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.ajv@6.12.6: 1 known vulnerabilityGHSA-2g4f-4pwh-qvx6
langchain/financial-agent/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.baseline-browser-mapping@2.8.29: 1 known vulnerabilityGHSA-w5vr-8v7q-w6rv
langchain/financial-agent/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.glob@10.5.0: 1 known vulnerabilityGHSA-3g3m-2fjr-6pw4
langchain/financial-agent/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@6.1.2: 2 known vulnerabilitiesGHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
langchain/financial-agent/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.yaml@2.6.0: 1 known vulnerabilityGHSA-48c2-rrv3-qjmp
langchain/financial-agent/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.bleach@6.2.0: 2 known vulnerabilitiesGHSA-8rfp-98v4-mmr6, GHSA-gj48-438w-jh9v
langchain/shopping-agent/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.filelock@3.20.3: 2 known vulnerabilitiesGHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g
langchain/shopping-agent/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.langchain@1.0.1: 1 known vulnerabilityPYSEC-2026-2192
langchain/shopping-agent/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.langchain-anthropic@1.0.0: 1 known vulnerabilityPYSEC-2026-2556
langchain/shopping-agent/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.langchain-openai@1.0.1: 1 known vulnerabilityPYSEC-2026-76
langchain/shopping-agent/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pydantic-settings@2.13.1: 1 known vulnerabilityGHSA-4xgf-cpjx-pc3j
llamaindex/agentcore-kyc-workflow/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Sample Agentic Frameworks On AWS alternatives
View more →Similar ai agents in Cloud Infrastructure, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Sample Agentic Frameworks On AWS (this page) aws-samples | 266 | MIT-0 | Jun 2, 2026 | Scanned, no flagged issues |
| OmniRoute cheaper-inference | 83k | MIT | Nov 1, 2026 | Scanned, see report |
| Generative AI GoogleCloudPlatform | 18k | Apache-2.0 | Oct 30, 2026 | Scanned, no flagged issues |
| Dsh Routing Suite yjh051108 | 7k | MIT | Sep 18, 2026 | Scanned, no flagged issues |
| Intentkit crestalnetwork | 6.5k | MIT | Sep 16, 2026 | Scanned, no flagged issues |
| Open Agents vercel-labs | 5.9k | MIT | Aug 29, 2026 | Scanned, no flagged issues |