Astron Rpa MCP Server
by iflytekAgent-ready RPA suite with out-of-the-box automation tools. Built for individuals and enterprises.
Astron Rpa is an open-source mcp server by iflytek, written mainly in Python, with 5,284 GitHub stars and the Apache-2.0 license. Its code was last updated Oct 26, 2026.
Scan summary: scanned Nov 5, 2026 at commit df46ed8. Seen able to run shell commands, run dynamic code. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
df46ed8 · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit1197 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Buildn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (183)
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
engine/components/astronverse-software/src/astronverse/software/software.py:176 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
engine/components/astronverse-system/src/astronverse/system/core/printer_core.py:548 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
engine/components/astronverse-system/src/astronverse/system/core/printer_core.py:574 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
engine/components/astronverse-system/src/astronverse/system/core/process_core.py:82 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
engine/components/astronverse-system/src/astronverse/system/core/process_core.py:124 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
engine/components/astronverse-window/src/astronverse/window/core_unix.py:17 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
engine/components/astronverse-word/src/astronverse/word/core_unix.py:52 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
engine/components/astronverse-word/src/astronverse/word/core_unix.py:201 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
engine/components/astronverse-word/src/astronverse/word/core_unix.py:202 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
engine/components/astronverse-word/src/astronverse/word/core_win.py:254 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
engine/components/astronverse-word/src/astronverse/word/core_win.py:255 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
engine/servers/astronverse-scheduler/src/astronverse/scheduler/core/schduler/venv.py:47 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
engine/servers/astronverse-scheduler/src/astronverse/scheduler/core/schduler/venv.py:49 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
engine/servers/astronverse-scheduler/src/astronverse/scheduler/core/schduler/venv.py:56 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
engine/servers/astronverse-scheduler/src/astronverse/scheduler/core/schduler/venv.py:58 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.aiomysql@0.2.0: 2 known vulnerabilitiesPYSEC-2026-1110, PYSEC-2026-1110
backend/ai-service/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.dnspython@2.7.0: 2 known vulnerabilitiesGHSA-45c3-73f7-pv4m, GHSA-45c3-73f7-pv4m
backend/ai-service/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.20: 14 known vulnerabilitiesPYSEC-2026-1852, PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038, PYSEC-2026-3039 +9 more
backend/ai-service/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.46.2: 14 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-1941, PYSEC-2026-1942, PYSEC-2026-2280, PYSEC-2026-2281 +9 more
backend/ai-service/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.26.0: 7 known vulnerabilitiesPYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more
backend/openapi-service/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.7.0: 6 known vulnerabilitiesPYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177, PYSEC-2026-4175, PYSEC-2026-4176 +1 more
backend/openapi-service/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mysql:mysql-connector-java@8.0.28: 1 known vulnerabilityGHSA-m6vm-37g8-gqvh
backend/resource-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.com.fasterxml.jackson.core:jackson-core@2.15.4: 3 known vulnerabilitiesGHSA-72hv-8253-57qq, GHSA-7hhh-6rmp-j9qf, GHSA-r7wm-3cxj-wff9
backend/resource-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.com.fasterxml.jackson.core:jackson-databind@2.15.4: 12 known vulnerabilitiesGHSA-3pjw-73gf-8qr5, GHSA-5gvw-p9qm-jgwh, GHSA-5jmj-h7xm-6q6v, GHSA-cxp5-3px4-pw24, GHSA-gx83-3vf8-gh7j +7 more
backend/resource-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.com.google.protobuf:protobuf-java@3.11.4: 5 known vulnerabilitiesGHSA-4gg5-vx3j-xwc7, GHSA-735f-pc8j-v9w8, GHSA-g5ww-5jh7-63cx, GHSA-h4h5-3hr4-j3g2, GHSA-wrvw-hg22-4m67
backend/resource-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.io.netty:netty-codec@4.1.107.Final: 3 known vulnerabilitiesGHSA-3p8m-j85q-pgmj, GHSA-558v-64gr-wgg4, GHSA-mj4r-2hfc-f8p6
backend/resource-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.io.netty:netty-codec-http@4.1.107.Final: 19 known vulnerabilitiesGHSA-38f8-5428-x5cv, GHSA-4mp9-239f-g9hg, GHSA-57rv-r2g8-2cj3, GHSA-5jpm-x58v-624v, GHSA-6cqp-g7gg-8hr5 +14 more
backend/resource-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.io.netty:netty-codec-http2@4.1.107.Final: 8 known vulnerabilitiesGHSA-563q-j3cm-6jxm, GHSA-5x3r-wrvg-rp6q, GHSA-93wv-jw9v-4972, GHSA-c2gf-v879-257j, GHSA-c69g-56f8-xwqj +3 more
backend/resource-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.net.minidev:json-smart@2.5.0: 1 known vulnerabilityGHSA-pq2g-wx69-c263
backend/resource-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.assertj:assertj-core@3.24.2: 1 known vulnerabilityGHSA-rqfh-9r24-8c9r
backend/resource-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.springframework.boot:spring-boot@3.2.4: 1 known vulnerabilityGHSA-rc42-6c7j-7h5r
backend/resource-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.springframework:spring-core@6.1.5: 2 known vulnerabilitiesGHSA-659m-px2c-25wj, GHSA-jmp9-x22r-554x
backend/resource-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.springframework:spring-expression@6.1.5: 3 known vulnerabilitiesGHSA-9f52-rjqv-25qv, GHSA-r5w3-xv2f-j59q, GHSA-wxpp-56q6-5pcg
backend/resource-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.springframework:spring-web@6.1.5: 4 known vulnerabilitiesGHSA-2rmj-mq67-h97g, GHSA-2wrp-6fg6-hmc5, GHSA-4gc7-5j7h-4qph, GHSA-6r3c-xf4w-jxjm
backend/resource-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.commons-fileupload:commons-fileupload@1.4: 2 known vulnerabilitiesGHSA-hfrx-6qgj-fp6c, GHSA-vv7r-c36w-3prj
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.jsoup:jsoup@1.14.3: 3 known vulnerabilitiesGHSA-65r4-943x-97jj, GHSA-gp7f-rwcx-9369, GHSA-pmhh-3w7g-xqp8
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.springframework.cloud:spring-cloud-openfeign-core@2.2.0.RELEASE: 2 known vulnerabilitiesGHSA-pf94-6v2v-cm3j, GHSA-pf94-6v2v-cm3j
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ch.qos.logback:logback-classic@1.2.3: 1 known vulnerabilityGHSA-vmq6-5m68-f53m
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ch.qos.logback:logback-core@1.2.3: 8 known vulnerabilitiesGHSA-25qh-j22f-pwp8, GHSA-668q-qrv7-99fm, GHSA-6v67-2wr5-gvf4, GHSA-jhq6-gfmj-v8fx, GHSA-p47f-322f-whfh +3 more
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.com.fasterxml.jackson.core:jackson-core@2.11.4: 4 known vulnerabilitiesGHSA-7hhh-6rmp-j9qf, GHSA-h46c-h94j-95f3, GHSA-r7wm-3cxj-wff9, GHSA-wf8f-6423-gfxg
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.com.fasterxml.jackson.core:jackson-databind@2.11.4: 15 known vulnerabilitiesGHSA-3wrr-7qpf-2prh, GHSA-3x8x-79m2-3w2w, GHSA-57j2-w4cx-62h2, GHSA-5gvw-p9qm-jgwh, GHSA-5jmj-h7xm-6q6v +10 more
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.com.google.code.gson:gson@2.8.6: 1 known vulnerabilityGHSA-4jrv-ppp4-jm57
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.com.google.guava:guava@16.0.1: 4 known vulnerabilitiesGHSA-5mg8-w23w-74h3, GHSA-7g45-4rm6-3mm3, GHSA-mvr2-9pj6-7w5j, GHSA-xxph-c9ww-hj94
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.commons-io:commons-io@2.2: 2 known vulnerabilitiesGHSA-78wr-2p64-hpwj, GHSA-gwrp-pvrq-jmwv
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.io.netty:netty-codec@4.1.65.Final: 5 known vulnerabilitiesGHSA-3p8m-j85q-pgmj, GHSA-558v-64gr-wgg4, GHSA-9vjp-v76f-g363, GHSA-grg4-wf29-r9vv, GHSA-mj4r-2hfc-f8p6
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mysql:mysql-connector-java@8.0.25: 3 known vulnerabilitiesGHSA-g76j-4cxx-23h9, GHSA-m6vm-37g8-gqvh, GHSA-w6f2-8wx4-47r5
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.net.minidev:json-smart@2.3.1: 1 known vulnerabilityGHSA-493p-pfq6-5258
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.apache.commons:commons-compress@1.18: 6 known vulnerabilitiesGHSA-4g9r-vxhx-9pgx, GHSA-53x6-4x5p-rrvv, GHSA-7hfm-57qf-j43q, GHSA-crv7-7245-f45f, GHSA-mc84-pj99-q6hh +1 more
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.assertj:assertj-core@3.16.1: 1 known vulnerabilityGHSA-rqfh-9r24-8c9r
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.hibernate.validator:hibernate-validator@6.1.7.Final: 2 known vulnerabilitiesGHSA-7v6m-28jr-rg84, GHSA-x83m-pf6f-pf9g
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.mybatis:mybatis@3.5.5: 1 known vulnerabilityGHSA-qq48-m4jx-xqh8
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.springframework.boot:spring-boot@2.3.11.RELEASE: 2 known vulnerabilitiesGHSA-rc42-6c7j-7h5r, GHSA-wwpq-f5c3-7hvx
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.springframework.boot:spring-boot-autoconfigure@2.3.11.RELEASE: 1 known vulnerabilityGHSA-xf96-w227-r7c4
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.springframework.data:spring-data-commons@2.3.9.RELEASE: 3 known vulnerabilitiesGHSA-5m4m-73w9-8433, GHSA-5vpf-xvv7-c8vh, GHSA-9fw2-h3hf-293r
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.springframework.security:spring-security-crypto@5.3.9.RELEASE: 1 known vulnerabilityGHSA-mg83-c7gq-rv5c
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.springframework:spring-context@5.2.15.RELEASE: 3 known vulnerabilitiesGHSA-4gc7-5j7h-4qph, GHSA-4wp7-92pw-q264, GHSA-g5mm-vmx4-3rg7
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.springframework:spring-expression@5.2.15.RELEASE: 8 known vulnerabilitiesGHSA-558x-2xjg-6232, GHSA-564r-hj7v-mcr5, GHSA-775g-4xr8-78h8, GHSA-9cmq-m9j5-mvww, GHSA-9f52-rjqv-25qv +3 more
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.yaml:snakeyaml@1.26: 7 known vulnerabilitiesGHSA-3mc7-4q67-w48m, GHSA-98wm-3w3q-mw94, GHSA-9w3m-gqgf-c4p9, GHSA-c4r9-r8fh-9vj2, GHSA-hhhw-99gj-p3c3 +2 more
backend/robot-service/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.com.google.guava:guava@32.1.2-jre: 1 known vulnerabilityGHSA-xxph-c9ww-hj94
backend/rpa-auth/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.com.squareup.okhttp3:okhttp@4.9.1: 1 known vulnerabilityGHSA-3cqm-mf7h-prrj
backend/rpa-auth/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lxml@6.0.2: 2 known vulnerabilitiesPYSEC-2026-87, PYSEC-2026-87
engine/components/astronverse-ai/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pypdf@6.3.0: 64 known vulnerabilitiesPYSEC-2026-1827, PYSEC-2026-1828, PYSEC-2026-1829, PYSEC-2026-1832, PYSEC-2026-3004 +59 more
engine/components/astronverse-ai/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.5.0: 18 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-1994, PYSEC-2026-1996, PYSEC-2026-1998, PYSEC-2026-4175 +13 more
engine/components/astronverse-ai/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.6.2: 12 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-142, PYSEC-2026-1996, PYSEC-2026-4175, PYSEC-2026-4176 +7 more
engine/components/astronverse-browser/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.aiohttp@3.14.3: 8 known vulnerabilitiesGHSA-2g87-pp6c-29x5, GHSA-494j-54xm-rwp3, GHSA-5wr8-gcqf-gqf3, GHSA-6cjc-53gc-5rqm, GHSA-9xw5-w5jj-pvcg +3 more
engine/components/astronverse-control/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nbconvert@7.17.1: 1 known vulnerabilityGHSA-pjvx-prjx-h659
engine/components/astronverse-control/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyasn1@0.6.4: 8 known vulnerabilitiesGHSA-2qm8-x737-gmw5, GHSA-9m75-vc3g-4x39, GHSA-fm9c-5rcf-2q5p, GHSA-mm57-4v3p-rchx, GHSA-2qm8-x737-gmw5 +3 more
engine/components/astronverse-control/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tornado@6.5.8: 6 known vulnerabilitiesGHSA-3hv7-mjh2-fv65, GHSA-c2m8-h5v5-343r, GHSA-chx6-46f5-w4vp, GHSA-pcg2-g6cj-q92c, GHSA-pw9p-v7r6-gx4p +1 more
engine/components/astronverse-control/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.6.3: 20 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-142, PYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177 +15 more
engine/components/astronverse-cua/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.py7zr@1.1.0: 12 known vulnerabilitiesPYSEC-2026-2972, PYSEC-2026-2973, PYSEC-2026-2974, PYSEC-2026-2972, PYSEC-2026-2973 +7 more
engine/components/astronverse-smart/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.soupsieve@2.8.1: 8 known vulnerabilitiesPYSEC-2026-3071, PYSEC-2026-3072, PYSEC-2026-4170, PYSEC-2026-4171, PYSEC-2026-3071 +3 more
engine/servers/astronverse-picker/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.48.0: 6 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-1942, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248 +1 more
engine/servers/astronverse-scheduler/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ujson@5.11.0: 8 known vulnerabilitiesPYSEC-2026-2291, PYSEC-2026-2292, PYSEC-2026-2293, PYSEC-2026-2294, PYSEC-2026-2291 +3 more
engine/servers/astronverse-scheduler/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pypdf@6.6.0: 61 known vulnerabilitiesPYSEC-2026-1827, PYSEC-2026-3004, PYSEC-2026-3005, PYSEC-2026-3006, PYSEC-2026-3007 +56 more
engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.50.0: 5 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248, PYSEC-2026-249
engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.virtualenv@20.36.1: 19 known vulnerabilitiesPYSEC-2026-4011, PYSEC-2026-4012, PYSEC-2026-4013, PYSEC-2026-4014, GHSA-394h-qwmc-48pf +14 more
engine/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/sdk@1.30.0: 6 known vulnerabilitiesGHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
integrations/n8n/n8n-nodes-astron-rpa/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.axios@1.18.0: 12 known vulnerabilitiesGHSA-3pq3-5fj3-cg6v, GHSA-44g4-m2mj-wpvx, GHSA-4hqw-qxg8-jxx2, GHSA-542g-h47m-68v8, GHSA-9fr6-4gfg-395g +7 more
integrations/n8n/n8n-nodes-astron-rpa/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@2.3.0: 1 known vulnerabilityGHSA-27r3-jxmh-p828
integrations/n8n/n8n-nodes-astron-rpa/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.follow-redirects@1.16.0: 3 known vulnerabilitiesGHSA-8r9p-f939-6h3c, GHSA-mrwp-f3q8-3g9p, GHSA-q3jh-wrc6-jgq8
integrations/n8n/n8n-nodes-astron-rpa/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.25.76: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
integrations/n8n/n8n-nodes-astron-rpa/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
docker/tests/test-auth-handler.sh:100 - lowLow. Minor, or common in normal tools. Shown for information.idna@3.10: 3 known vulnerabilitiesPYSEC-2026-215, PYSEC-2026-215, PYSEC-2026-215
backend/ai-service/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pygments@2.19.1: 2 known vulnerabilitiesPYSEC-2026-2987, PYSEC-2026-2987
backend/ai-service/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pytest@8.4.0: 1 known vulnerabilityPYSEC-2026-1845
backend/ai-service/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.python-dotenv@1.1.0: 2 known vulnerabilitiesPYSEC-2026-2270, PYSEC-2026-2270
backend/ai-service/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pytest@8.3.5: 1 known vulnerabilityPYSEC-2026-1845
backend/openapi-service/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.commons-net:commons-net@3.8.0: 1 known vulnerabilityGHSA-cgp8-4m63-fhh5
backend/resource-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.apache.commons:commons-lang3@3.12.0: 3 known vulnerabilitiesGHSA-j288-q9x7-2f5v, GHSA-j288-q9x7-2f5v, GHSA-j288-q9x7-2f5v
backend/resource-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.ch.qos.logback:logback-core@1.4.14: 6 known vulnerabilitiesGHSA-25qh-j22f-pwp8, GHSA-6v67-2wr5-gvf4, GHSA-jhq6-gfmj-v8fx, GHSA-p47f-322f-whfh, GHSA-pr98-23f8-jwxv +1 more
backend/resource-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.io.netty:netty-common@4.1.107.Final: 2 known vulnerabilitiesGHSA-389x-839f-4rhx, GHSA-xq3w-v528-46rv
backend/resource-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.io.netty:netty-transport-native-epoll@4.1.107.Final: 1 known vulnerabilityGHSA-w573-9ffj-6ff9
backend/resource-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.apache.logging.log4j:log4j-api@2.21.1: 1 known vulnerabilityGHSA-qv9r-c865-cp47
backend/resource-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.springframework:spring-context@6.1.5: 2 known vulnerabilitiesGHSA-4gc7-5j7h-4qph, GHSA-4wp7-92pw-q264
backend/resource-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.xmlunit:xmlunit-core@2.9.1: 1 known vulnerabilityGHSA-chfm-68vv-pvw5
backend/resource-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.com.jayway.jsonpath:json-path@2.4.0: 1 known vulnerabilityGHSA-pfh2-hfmq-phg5
backend/robot-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.commons-configuration:commons-configuration@1.8: 1 known vulnerabilityGHSA-pvp8-3xj6-8c6x
backend/robot-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.commons-lang:commons-lang@2.6: 1 known vulnerabilityGHSA-j288-q9x7-2f5v
backend/robot-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.io.netty:netty-common@4.1.65.Final: 2 known vulnerabilitiesGHSA-389x-839f-4rhx, GHSA-xq3w-v528-46rv
backend/robot-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.ognl:ognl@3.2.6: 1 known vulnerabilityGHSA-crwc-vw2r-qr6m
backend/robot-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.apache.logging.log4j:log4j-api@2.13.3: 1 known vulnerabilityGHSA-qv9r-c865-cp47
backend/robot-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.apache.poi:poi@4.1.0: 1 known vulnerabilityGHSA-9jwc-q6j3-8g9g
backend/robot-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.apache.poi:poi-ooxml@4.1.0: 1 known vulnerabilityGHSA-gmg8-593g-7mv3
backend/robot-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.apache.tomcat.embed:tomcat-embed-websocket@9.0.46: 1 known vulnerabilityGHSA-v682-8vv8-vpwr
backend/robot-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.bouncycastle:bcpkix-jdk15on@1.60: 2 known vulnerabilitiesGHSA-4cx2-fc23-5wg6, GHSA-wg6q-6289-32hp
backend/robot-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.bouncycastle:bcprov-jdk15on@1.60: 6 known vulnerabilitiesGHSA-6xx3-rg99-gc3p, GHSA-72m5-fvvv-55m6, GHSA-8xfc-gm6g-vgpv, GHSA-hr8g-6v94-x4m9, GHSA-v435-xc8x-wvr9 +1 more
backend/robot-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.glassfish:jakarta.el@3.0.3: 1 known vulnerabilityGHSA-v6w3-2prq-h95f
backend/robot-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.springframework.data:spring-data-keyvalue@2.3.9.RELEASE: 1 known vulnerabilityGHSA-xg2j-3hj6-pc24
backend/robot-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.springframework:spring-core@5.2.15.RELEASE: 3 known vulnerabilitiesGHSA-659m-px2c-25wj, GHSA-6gf2-pvqw-37ph, GHSA-rfmp-97jj-h8m6
backend/robot-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.xmlunit:xmlunit-core@2.7.0: 1 known vulnerabilityGHSA-chfm-68vv-pvw5
backend/robot-service/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.idna@3.11: 8 known vulnerabilitiesPYSEC-2026-215, PYSEC-2026-215, PYSEC-2026-215, PYSEC-2026-215, PYSEC-2026-215 +3 more
engine/components/astronverse-ai/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.python-dotenv@1.2.1: 2 known vulnerabilitiesPYSEC-2026-2270, PYSEC-2026-2270
engine/components/astronverse-ai/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.requests@2.32.5: 9 known vulnerabilitiesPYSEC-2026-2275, PYSEC-2026-2275, PYSEC-2026-2275, PYSEC-2026-2275, PYSEC-2026-2275 +4 more
engine/components/astronverse-ai/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.multidict@6.7.1: 1 known vulnerabilityPYSEC-2026-4244
engine/components/astronverse-control/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pyzipper@0.3.6: 4 known vulnerabilitiesPYSEC-2026-3044, PYSEC-2026-3044, PYSEC-2026-3044, PYSEC-2026-3044
engine/components/astronverse-smart/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.filelock@3.20.3: 2 known vulnerabilitiesGHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g
engine/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.jwcrypto@1.5.6: 1 known vulnerabilityPYSEC-2026-70
engine/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.tornado@6.5.10: 3 known vulnerabilitiesGHSA-pcg2-g6cj-q92c, GHSA-pw9p-v7r6-gx4p, GHSA-r4j5-9xpp-3985
engine/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.@hono/node-server@2.1.1: 1 known vulnerabilityGHSA-rmxm-3fg6-px4f
integrations/n8n/n8n-nodes-astron-rpa/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.fast-uri@3.1.8: 4 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-w74x-v6f9-j3xg, GHSA-wjr9-j795-jxcr, GHSA-xhq7-xmqj-769h
integrations/n8n/n8n-nodes-astron-rpa/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.hono@4.13.8: 1 known vulnerabilityGHSA-5r4p-p66f-jhc7
integrations/n8n/n8n-nodes-astron-rpa/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.ip-address@10.7.2: 1 known vulnerabilityGHSA-rxp7-6hxx-x8q5
integrations/n8n/n8n-nodes-astron-rpa/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.minimatch@9.0.9: 1 known vulnerabilityGHSA-g3hv-75wg-m249
integrations/n8n/n8n-nodes-astron-rpa/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.qs@6.16.0: 1 known vulnerabilityGHSA-6pq8-jhm2-2vcw
integrations/n8n/n8n-nodes-astron-rpa/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Astron Rpa alternatives
View more →Similar mcp servers in Productivity & Workflow, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Astron Rpa (this page) iflytek | 5.3k | Apache-2.0 | Oct 26, 2026 | Scanned, no flagged issues |
| N8n MCP czlonkowski | 23k | MIT | Oct 27, 2026 | Scanned, no flagged issues |
| Trigger Dev triggerdotdev | 17k | Apache-2.0 | Oct 31, 2026 | Scanned, no flagged issues |
| Skill Seekers yusufkaraaslan | 15k | MIT | Sep 30, 2026 | Scanned, no flagged issues |
| Windows MCP CursorTouch | 11k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Mobile MCP mobile-next | 10k | Apache-2.0 | Oct 30, 2026 | Scanned, no flagged issues |