Tabularis AI Agent

by TabularisDB• 5.4k•• Scanned•Claim this listing•Request removal
Database Managementai agentai assistantcross platformdatabase clientdatabase gui

Open-source desktop SQL workspace with 3 built-in database drivers and 26 shipped driver plugins, including SQL Server, DuckDB, ClickHouse and Redis. Built-in MCP server for Claude, Cursor and Devin, SQL notebooks and visual EXPLAIN.

Tabularis is an open-source ai agent by TabularisDB, written mainly in TypeScript, with 5,351 GitHub stars and the Apache-2.0 license. Its code was last updated Oct 31, 2026.

Scan summary: scanned Nov 5, 2026 at commit dc919d0. Seen able to run shell commands, run dynamic code, connect to the internet. Scan policy

Scanned
Full scan at dc919d0 · Nov 5, 2026
Scanned Builds
Static code scanwarn
Secrets scanpass
Dependency audit303 known vulnerabilitiesfail
Manifestnonewarn
Buildpass
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (95)

  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/update-roadmap.js:10
  • medium
    undici@7.30.0: 8 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-4w7w-5xrc-9h26, GHSA-55wc-3pg8-jfw6, GHSA-9fm3-97px-rjf6 +3 more
    e2e/pnpm-lock.yaml
  • medium
    undici@8.11.2: 8 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-4w7w-5xrc-9h26, GHSA-55wc-3pg8-jfw6, GHSA-9fm3-97px-rjf6 +3 more
    e2e/pnpm-lock.yaml
  • medium
    @modelcontextprotocol/sdk@1.29.0: 6 known vulnerabilities
    GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
    pnpm-lock.yaml
  • medium
    adm-zip@0.5.18: 8 known vulnerabilities
    GHSA-7q85-xj36-vmfc, GHSA-8238-w5pm-2374, GHSA-c6fg-446q-cg94, GHSA-j5f4-cc29-5x44, GHSA-p634-w6r4-rjp2 +3 more
    pnpm-lock.yaml
  • medium
    body-parser@2.3.0: 1 known vulnerability
    GHSA-27r3-jxmh-p828
    pnpm-lock.yaml
  • medium
    brace-expansion@1.1.13: 6 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
    pnpm-lock.yaml
  • medium
    brace-expansion@5.0.5: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-jxxr-4gwj-5jf2, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    pnpm-lock.yaml
  • medium
    browserslist@4.28.2: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    pnpm-lock.yaml
  • medium
    dompurify@3.2.7: 21 known vulnerabilities
    GHSA-39q2-94rc-95cp, GHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4 +16 more
    pnpm-lock.yaml
  • medium
    fast-uri@3.1.4: 11 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-5jgf-p345-68v8, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-fph4-wmhf-6fwf +6 more
    pnpm-lock.yaml
  • medium
    ip-address@10.2.0: 8 known vulnerabilities
    GHSA-22jq-vg5j-6vgg, GHSA-2vr4-cq9g-pvrc, GHSA-4xrf-jv44-h6hh, GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv +3 more
    pnpm-lock.yaml
  • medium
    js-yaml@4.1.1: 4 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
    pnpm-lock.yaml
  • medium
    lodash@4.17.21: 2 known vulnerabilities
    GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
    pnpm-lock.yaml
  • medium
    nanoid@3.3.11: 3 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
    pnpm-lock.yaml
  • medium
    postcss@8.5.8: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    pnpm-lock.yaml
  • medium
    react-router@7.13.2: 10 known vulnerabilities
    GHSA-2j2x-hqr9-3h42, GHSA-337j-9hxr-rhxg, GHSA-49rj-9fvp-4h2h, GHSA-84g9-w2xq-vcv6, GHSA-8x6r-g9mw-2r78 +5 more
    pnpm-lock.yaml
  • medium
    sharp@0.34.5: 3 known vulnerabilities
    GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    pnpm-lock.yaml
  • medium
    source-map-js@1.2.1: 1 known vulnerability
    GHSA-68fv-2mgg-jv7q
    pnpm-lock.yaml
  • medium
    tar@7.5.20: 1 known vulnerability
    GHSA-r292-9mhp-454m
    pnpm-lock.yaml
  • medium
    undici@7.24.6: 29 known vulnerabilities
    GHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-35p6-xmwp-9g52, GHSA-3xpg-4rpp-hhhm +24 more
    pnpm-lock.yaml
  • medium
    vite@7.3.1: 10 known vulnerabilities
    GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +5 more
    pnpm-lock.yaml
  • medium
    zod@4.3.6: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    pnpm-lock.yaml
  • medium
    aws-lc-sys@0.38.0: 2 known vulnerabilities
    RUSTSEC-2026-0044, RUSTSEC-2026-0048
    src-tauri/Cargo.lock
  • medium
    openssl@0.10.75: 8 known vulnerabilities
    GHSA-8c75-8mhr-p7r9, GHSA-ghm9-cr32-g9qj, GHSA-hppc-g8h3-xhp3, GHSA-phqj-4mhp-q6mq, GHSA-pqf5-4pqq-29f5 +3 more
    src-tauri/Cargo.lock
  • medium
    postgres-protocol@0.6.10: 2 known vulnerabilities
    RUSTSEC-2026-0179, RUSTSEC-2026-0180
    src-tauri/Cargo.lock
  • medium
    quick-xml@0.37.5: 2 known vulnerabilities
    RUSTSEC-2026-0194, RUSTSEC-2026-0195
    src-tauri/Cargo.lock
  • medium
    quick-xml@0.38.4: 2 known vulnerabilities
    RUSTSEC-2026-0194, RUSTSEC-2026-0195
    src-tauri/Cargo.lock
  • medium
    quinn-proto@0.11.13: 6 known vulnerabilities
    RUSTSEC-2026-0037, RUSTSEC-2026-0185, RUSTSEC-2026-0338, RUSTSEC-2026-0339, RUSTSEC-2026-0340 +1 more
    src-tauri/Cargo.lock
  • medium
    russh@0.43.0: 23 known vulnerabilities
    RUSTSEC-2026-0154, GHSA-35g8-35p8-c8fw, GHSA-47hw-gvq5-r2gm, GHSA-4p9f-7p9m-5vfg, GHSA-4r3c-5hpg-58qr +18 more
    src-tauri/Cargo.lock
  • medium
    russh-cryptovec@0.7.3: 1 known vulnerability
    RUSTSEC-2026-0153
    src-tauri/Cargo.lock
  • medium
    rustls-webpki@0.103.9: 5 known vulnerabilities
    RUSTSEC-2026-0049, RUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104, RUSTSEC-2026-0382
    src-tauri/Cargo.lock
  • medium
    tar@0.4.44: 3 known vulnerabilities
    RUSTSEC-2026-0067, RUSTSEC-2026-0068, GHSA-3pv8-6f4r-ffg2
    src-tauri/Cargo.lock
  • medium
    tauri@2.10.2: 1 known vulnerability
    GHSA-7gmj-67g7-phm9
    src-tauri/Cargo.lock
  • low
    glob@10.5.0: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    e2e/pnpm-lock.yaml
  • low
    glob@13.0.6: 2 known vulnerabilities
    GHSA-3g3m-2fjr-6pw4, GHSA-3g3m-2fjr-6pw4
    e2e/pnpm-lock.yaml
  • low
    minimatch@10.2.6: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    e2e/pnpm-lock.yaml
  • low
    minimatch@9.0.9: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    e2e/pnpm-lock.yaml
  • low
    serialize-javascript@7.1.2: 1 known vulnerability
    GHSA-m5mm-p8h7-m29v
    e2e/pnpm-lock.yaml
  • low
    @babel/core@7.29.0: 1 known vulnerability
    GHSA-4x5r-pxfx-6jf8
    pnpm-lock.yaml
  • low
    @hono/node-server@1.19.14: 2 known vulnerabilities
    GHSA-frvp-7c67-39w9, GHSA-rmxm-3fg6-px4f
    pnpm-lock.yaml
  • low
    @humanfs/node@0.16.7: 1 known vulnerability
    GHSA-p498-v437-472g
    pnpm-lock.yaml
  • low
    @vitest/mocker@4.1.2: 2 known vulnerabilities
    GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8
    pnpm-lock.yaml
  • low
    baseline-browser-mapping@2.10.13: 1 known vulnerability
    GHSA-w5vr-8v7q-w6rv
    pnpm-lock.yaml
  • low
    esbuild@0.27.4: 1 known vulnerability
    GHSA-g7r4-m6w7-qqqr
    pnpm-lock.yaml
  • low
    fast-copy@4.0.4: 1 known vulnerability
    GHSA-jggr-w7fw-pc2j
    pnpm-lock.yaml
  • low
    hono@4.12.31: 9 known vulnerabilities
    GHSA-54fx-42gc-7vw4, GHSA-5r4p-p66f-jhc7, GHSA-79qm-7rj5-m7r9, GHSA-8j4g-w8fx-2239, GHSA-crvj-82cr-hjcx +4 more
    pnpm-lock.yaml
  • low
    minimatch@10.2.5: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • low
    qs@6.15.3: 3 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-x5fp-wj9c-mxmx
    pnpm-lock.yaml
  • low
    vitest@4.1.2: 1 known vulnerability
    GHSA-82fw-gwwq-j7x9
    pnpm-lock.yaml
  • low
    anyhow@1.0.102: 1 known vulnerability
    RUSTSEC-2026-0190
    src-tauri/Cargo.lock
  • low
    crossbeam-epoch@0.9.18: 1 known vulnerability
    RUSTSEC-2026-0204
    src-tauri/Cargo.lock
  • low
    crypto-bigint@0.5.5: 1 known vulnerability
    RUSTSEC-2026-0387
    src-tauri/Cargo.lock
  • low
    event-listener@5.4.1: 1 known vulnerability
    RUSTSEC-2026-0221
    src-tauri/Cargo.lock
  • low
    fxhash@0.2.1: 1 known vulnerability
    RUSTSEC-2025-0057
    src-tauri/Cargo.lock
  • low
    glib@0.18.5: 1 known vulnerability
    RUSTSEC-2024-0429
    src-tauri/Cargo.lock
  • low
    h2@0.4.13: 1 known vulnerability
    RUSTSEC-2026-0258
    src-tauri/Cargo.lock
  • low
    pin-utils@0.1.0: 1 known vulnerability
    RUSTSEC-2026-0441
    src-tauri/Cargo.lock
  • low
    proc-macro-error@1.0.4: 1 known vulnerability
    RUSTSEC-2024-0370
    src-tauri/Cargo.lock
  • low
    rand@0.7.3: 1 known vulnerability
    RUSTSEC-2026-0097
    src-tauri/Cargo.lock
  • low
    rand@0.8.5: 1 known vulnerability
    RUSTSEC-2026-0097
    src-tauri/Cargo.lock
  • low
    rand@0.9.2: 1 known vulnerability
    RUSTSEC-2026-0097
    src-tauri/Cargo.lock
  • low
    rkyv@0.7.46: 1 known vulnerability
    RUSTSEC-2026-0235
    src-tauri/Cargo.lock
  • low
    rsa@0.9.10: 1 known vulnerability
    RUSTSEC-2023-0071
    src-tauri/Cargo.lock
  • low
    rustls@0.23.37: 4 known vulnerabilities
    RUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0348, RUSTSEC-2026-0349
    src-tauri/Cargo.lock
  • low
    rustls-pemfile@2.2.0: 1 known vulnerability
    RUSTSEC-2025-0134
    src-tauri/Cargo.lock
  • low
    serde_with@3.17.0: 1 known vulnerability
    GHSA-7gcf-g7xr-8hxj
    src-tauri/Cargo.lock
  • low
    tokio@1.50.0: 1 known vulnerability
    RUSTSEC-2026-0386
    src-tauri/Cargo.lock
  • low
    tokio-postgres@0.7.16: 1 known vulnerability
    RUSTSEC-2026-0178
    src-tauri/Cargo.lock
  • low
    unic-char-property@0.9.0: 1 known vulnerability
    RUSTSEC-2025-0081
    src-tauri/Cargo.lock
  • low
    unic-char-range@0.9.0: 1 known vulnerability
    RUSTSEC-2025-0075
    src-tauri/Cargo.lock
  • low
    unic-common@0.9.0: 1 known vulnerability
    RUSTSEC-2025-0080
    src-tauri/Cargo.lock
  • low
    unic-ucd-ident@0.9.0: 1 known vulnerability
    RUSTSEC-2025-0100
    src-tauri/Cargo.lock
  • low
    unic-ucd-version@0.9.0: 1 known vulnerability
    RUSTSEC-2025-0098
    src-tauri/Cargo.lock
  • low
    unsafe-libyaml@0.2.11: 1 known vulnerability
    RUSTSEC-2024-0449
    src-tauri/Cargo.lock
  • low
    webpki-root-certs@1.0.6: 1 known vulnerability
    RUSTSEC-2026-0383
    src-tauri/Cargo.lock
  • low
    webpki-roots@1.0.8: 1 known vulnerability
    RUSTSEC-2026-0381
    src-tauri/Cargo.lock
  • low
    zbus_names@3.0.0: 1 known vulnerability
    RUSTSEC-2026-0371
    src-tauri/Cargo.lock
  • low
    zbus_names@4.3.1: 1 known vulnerability
    RUSTSEC-2026-0371
    src-tauri/Cargo.lock
  • low
    zstd@0.13.3: 1 known vulnerability
    RUSTSEC-2026-0391
    src-tauri/Cargo.lock
  • low
    zstd-safe@7.2.4: 12 known vulnerabilities
    RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399 +7 more
    src-tauri/Cargo.lock
  • low
    zstd-sys@2.0.16+zstd.1.5.7: 1 known vulnerability
    RUSTSEC-2026-0410
    src-tauri/Cargo.lock
  • low
    zvariant@4.2.0: 1 known vulnerability
    RUSTSEC-2026-0370
    src-tauri/Cargo.lock
  • low
    zvariant@5.10.0: 1 known vulnerability
    RUSTSEC-2026-0370
    src-tauri/Cargo.lock
  • low
    zvariant_derive@4.2.0: 1 known vulnerability
    RUSTSEC-2026-0372
    src-tauri/Cargo.lock
  • low
    zvariant_derive@5.10.0: 1 known vulnerability
    RUSTSEC-2026-0372
    src-tauri/Cargo.lock
  • low
    No manifest declaring network access and environment variables (agent.json)

Network activity

During install
registry.npmjs.org
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Tabularis alternatives

View more →

Similar ai agents in Database Management, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Tabularis (this page)
TabularisDB
5.4kApache-2.0Oct 31, 2026Scanned, no flagged issues
Graphify
Graphify-Labs
140kApache-2.0Nov 1, 2026Scanned, no flagged issues
Claude Mem
thedotmack
108kApache-2.0Nov 1, 2026Scanned, no flagged issues
Mem0
mem0ai
68kApache-2.0Oct 30, 2026Scanned, no flagged issues
Hindsight
vectorize-io
57kMITNov 1, 2026Scanned, no flagged issues
Dokploy
Dokploy
38kNone foundOct 31, 2026Not scanned yet