Minthcm MCP Server
by minthcmOpen-source HCM system for managing HR processes with AI agents. Full data ownership, MCP/A2A-native, no vendor lock-in.
Minthcm is an open-source mcp server by minthcm, written mainly in PHP, with 438 GitHub stars and the AGPL-3.0 license. Its code was last updated Oct 28, 2026.
Scan summary: scanned Nov 5, 2026 at commit c9a759e. Seen able to run dynamic code. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
c9a759e · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit557 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Buildn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (200)
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.phpunit/phpunit@11.5.25: 1 known vulnerabilityGHSA-vvj3-c3rp-c85p
api/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@babel/plugin-transform-modules-systemjs@7.12.1: 1 known vulnerabilityGHSA-fv7c-fp4j-7gwp
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@1.20.3: 2 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.12: 7 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.braces@2.3.2: 1 known vulnerabilityGHSA-grv7-fg5c-xmjg
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.28.0: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.compression@1.8.1: 1 known vulnerabilityGHSA-vc2v-76pw-4v95
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cross-spawn@5.1.0: 1 known vulnerabilityGHSA-3xgq-45jj-v275
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.decode-uri-component@0.2.2: 2 known vulnerabilitiesGHSA-qr28-fpjm-wq7f, GHSA-vcc3-ghjq-m6fr
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.flatted@2.0.2: 2 known vulnerabilitiesGHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.html-minifier@3.5.21: 1 known vulnerabilityGHSA-pfq8-rq6v-vf5m
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.http-proxy-middleware@0.19.1: 2 known vulnerabilitiesGHSA-64mm-vxmg-q3vj, GHSA-c7qv-q95q-8v27
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ip@1.1.9: 1 known vulnerabilityGHSA-2p57-rm9w-gvfp
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@3.14.1: 10 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +5 more
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.json5@0.5.1: 1 known vulnerabilityGHSA-9c47-m6qq-7p4h
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.launch-editor@2.2.1: 5 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-c27g-q93r-2cwf, GHSA-r825-w8mm-5pxw, GHSA-v6wh-96g9-6wx3
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash@4.17.21: 4 known vulnerabilitiesGHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg, GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@3.1.2: 6 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +1 more
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.11: 9 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w, GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8 +4 more
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.node-forge@0.10.0: 24 known vulnerabilitiesGHSA-2328-f5f3-gj25, GHSA-2r2c-g63r-vccr, GHSA-4487-j8r4-4g2f, GHSA-4642-5mcj-2rqw, GHSA-525v-9gp9-w22h +19 more
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nth-check@1.0.2: 1 known vulnerabilityGHSA-rp65-9cf3-cjxr
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.path-to-regexp@0.1.12: 1 known vulnerabilityGHSA-37ch-88jc-xwx2
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@2.2.2: 2 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@7.0.39: 5 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-7fh5-64p2-3v2j, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.6: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.serialize-javascript@4.0.0: 2 known vulnerabilitiesGHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 3 known vulnerabilitiesGHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.svgo@1.3.2: 3 known vulnerabilitiesGHSA-2p49-hgcm-8545, GHSA-4vpr-x523-8j87, GHSA-w27v-7q3p-w38r
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tmp@0.0.33: 2 known vulnerabilitiesGHSA-52f5-9888-hmc6, GHSA-ph9p-34f9-6g65
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@3.4.0: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@8.3.2: 2 known vulnerabilitiesGHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vuetify@2.6.13: 2 known vulnerabilitiesGHSA-3jp5-5f8r-q2wg, GHSA-9w3x-85mw-4fwm
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.webpack-dev-middleware@3.7.3: 2 known vulnerabilitiesGHSA-g84c-rxfj-3j2c, GHSA-wr3j-pwj9-hqq6
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@6.2.3: 1 known vulnerabilityGHSA-96hv-2xvq-fx4p
kanban/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.guzzlehttp/guzzle@7.9.3: 9 known vulnerabilitiesGHSA-94pj-82f3-465w, GHSA-cwxw-98qj-8qjx, GHSA-f283-ghqc-fg79, GHSA-f7vp-7xgx-4w4r, GHSA-g446-98w2-8p5w +4 more
legacy/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.symfony/yaml@v5.4.45: 4 known vulnerabilitiesGHSA-2v3c-qxhr-7vpv, GHSA-4qpc-3hr4-r2p4, GHSA-9frc-8383-795m, GHSA-c2p3-7m5p-cv8x
legacy/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tinymce/tinymce@6.8.5: 5 known vulnerabilitiesGHSA-5359-pvf2-pw78, GHSA-mh5m-5hw4-5c69, GHSA-q742-qvgc-gc2f, GHSA-v98h-vmpc-fpqv, GHSA-vg35-5wq7-3x7w
legacy/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zbateson/mail-mime-parser@2.4.1: 4 known vulnerabilitiesGHSA-36h5-qg4p-q2qf, GHSA-f6v3-2qmr-vfjx, GHSA-36h5-qg4p-q2qf, GHSA-f6v3-2qmr-vfjx
legacy/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.guzzlehttp/guzzle@7.9.2: 9 known vulnerabilitiesGHSA-94pj-82f3-465w, GHSA-cwxw-98qj-8qjx, GHSA-f283-ghqc-fg79, GHSA-f7vp-7xgx-4w4r, GHSA-g446-98w2-8p5w +4 more
legacy/include/OAuth2Mailing/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.phpseclib/phpseclib@3.0.42: 5 known vulnerabilitiesGHSA-3qpq-r242-jqj7, GHSA-94g3-g5v7-q4jg, GHSA-m557-wrgg-6rp4, GHSA-q97c-8qh3-fpc6, GHSA-r854-jrxh-36qx
legacy/include/OAuth2Mailing/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.phpunit/phpunit@9.6.19: 1 known vulnerabilityGHSA-vvj3-c3rp-c85p
legacy/vendor/consolidation/annotated-command/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.squizlabs/php_codesniffer@3.9.1: 1 known vulnerabilityGHSA-hmqg-cxww-wqhq
legacy/vendor/consolidation/annotated-command/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.phpunit/phpunit@9.5.25: 1 known vulnerabilityGHSA-vvj3-c3rp-c85p
legacy/vendor/consolidation/config/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.squizlabs/php_codesniffer@3.7.1: 1 known vulnerabilityGHSA-hmqg-cxww-wqhq
legacy/vendor/consolidation/config/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.symfony/yaml@v5.4.12: 4 known vulnerabilitiesGHSA-2v3c-qxhr-7vpv, GHSA-4qpc-3hr4-r2p4, GHSA-9frc-8383-795m, GHSA-c2p3-7m5p-cv8x
legacy/vendor/consolidation/config/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.phpunit/phpunit@8.5.23: 2 known vulnerabilitiesGHSA-vvj3-c3rp-c85p, GHSA-vvj3-c3rp-c85p
legacy/vendor/consolidation/log/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.squizlabs/php_codesniffer@3.6.2: 2 known vulnerabilitiesGHSA-hmqg-cxww-wqhq, GHSA-hmqg-cxww-wqhq
legacy/vendor/consolidation/log/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.guzzlehttp/guzzle@7.5.0: 9 known vulnerabilitiesGHSA-94pj-82f3-465w, GHSA-cwxw-98qj-8qjx, GHSA-f283-ghqc-fg79, GHSA-f7vp-7xgx-4w4r, GHSA-g446-98w2-8p5w +4 more
legacy/vendor/consolidation/output-formatters/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.phpunit/phpunit@9.6.3: 1 known vulnerabilityGHSA-vvj3-c3rp-c85p
legacy/vendor/consolidation/output-formatters/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.squizlabs/php_codesniffer@3.7.2: 1 known vulnerabilityGHSA-hmqg-cxww-wqhq
legacy/vendor/consolidation/output-formatters/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.symfony/yaml@v6.4.3: 4 known vulnerabilitiesGHSA-2v3c-qxhr-7vpv, GHSA-4qpc-3hr4-r2p4, GHSA-9frc-8383-795m, GHSA-c2p3-7m5p-cv8x
legacy/vendor/consolidation/output-formatters/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.symfony/process@v5.4.3: 2 known vulnerabilitiesGHSA-qq5c-677p-737q, GHSA-r39x-jcww-82v6
legacy/vendor/consolidation/robo/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.symfony/yaml@v5.4.3: 4 known vulnerabilitiesGHSA-2v3c-qxhr-7vpv, GHSA-4qpc-3hr4-r2p4, GHSA-9frc-8383-795m, GHSA-c2p3-7m5p-cv8x
legacy/vendor/consolidation/robo/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.composer/composer@2.3.5: 13 known vulnerabilitiesGHSA-47f6-5gq3-vx9c, GHSA-499r-g7pc-vmp9, GHSA-59pp-r3rg-353g, GHSA-7c6p-848j-wh5h, GHSA-96h3-5x6v-m776 +8 more
legacy/vendor/consolidation/robo/tools/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.symfony/process@v6.0.7: 1 known vulnerabilityGHSA-qq5c-677p-737q
legacy/vendor/consolidation/robo/tools/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.phpunit/phpunit@9.6.17: 1 known vulnerabilityGHSA-vvj3-c3rp-c85p
legacy/vendor/mockery/mockery/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.jinja2@3.1.4: 6 known vulnerabilitiesPYSEC-2026-1471, PYSEC-2026-1472, PYSEC-2026-1475, PYSEC-2026-1471, PYSEC-2026-1472 +1 more
legacy/vendor/mockery/mockery/docs/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.setuptools@69.2.0: 4 known vulnerabilitiesPYSEC-2025-49, PYSEC-2026-1918, PYSEC-2026-3447, GHSA-xmj3-9gf7-h52w
legacy/vendor/mockery/mockery/docs/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.2.1: 9 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-1994, PYSEC-2026-1995, PYSEC-2026-1996, PYSEC-2026-1997 +4 more
legacy/vendor/mockery/mockery/docs/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.wheel@0.43.0: 1 known vulnerabilityPYSEC-2026-2047
legacy/vendor/mockery/mockery/docs/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.phpunit/phpunit@4.0.0: 1 known vulnerabilityGHSA-vvj3-c3rp-c85p
legacy/vendor/soundasleep/html2text/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.symfony/yaml@v2.6.5: 4 known vulnerabilitiesGHSA-2v3c-qxhr-7vpv, GHSA-4qpc-3hr4-r2p4, GHSA-9frc-8383-795m, GHSA-c2p3-7m5p-cv8x
legacy/vendor/soundasleep/html2text/composer.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/sdk@1.27.1: 6 known vulnerabilitiesGHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
mcp/apps/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@2.2.2: 2 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
mcp/apps/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.express-rate-limit@8.2.1: 1 known vulnerabilityGHSA-46wh-pxpv-q5gq
mcp/apps/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.1.0: 24 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +19 more
mcp/apps/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.hono@4.12.4: 33 known vulnerabilitiesGHSA-26pp-8wgv-hjvm, GHSA-2gcr-mfcq-wcc3, GHSA-3hrh-pfw6-9m5x, GHSA-458j-xx4x-4375, GHSA-54fx-42gc-7vw4 +28 more
mcp/apps/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ip-address@10.0.1: 6 known vulnerabilitiesGHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more
mcp/apps/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.path-to-regexp@8.3.0: 2 known vulnerabilitiesGHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f
mcp/apps/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@2.3.1: 2 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
mcp/apps/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@4.0.3: 2 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
mcp/apps/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.8: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
mcp/apps/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@6.4.1: 9 known vulnerabilitiesGHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +4 more
mcp/apps/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.3.6: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
mcp/apps/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@babel/plugin-transform-modules-systemjs@7.24.1: 1 known vulnerabilityGHSA-fv7c-fp4j-7gwp
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@vue/server-renderer@3.5.13: 1 known vulnerabilityGHSA-g2v6-rqmx-r4w6
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.axios@1.15.0: 36 known vulnerabilitiesGHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3pq3-5fj3-cg6v, GHSA-3w6x-2g7m-8v23, GHSA-42h9-826w-cgv3 +31 more
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@1.20.4: 2 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.11: 8 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +3 more
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.braces@3.0.2: 1 known vulnerabilityGHSA-grv7-fg5c-xmjg
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.23.0: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.compression@1.7.4: 1 known vulnerabilityGHSA-vc2v-76pw-4v95
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.dompurify@3.4.1: 13 known vulnerabilitiesGHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4, GHSA-c6gr-qvv4-5v3f +8 more
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.flatted@3.3.1: 2 known vulnerabilitiesGHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.follow-redirects@1.16.0: 3 known vulnerabilitiesGHSA-8r9p-f939-6h3c, GHSA-mrwp-f3q8-3g9p, GHSA-q3jh-wrc6-jgq8
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.form-data@4.0.5: 1 known vulnerabilityGHSA-hmw2-7cc7-3qxx
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.joi@17.13.1: 6 known vulnerabilitiesGHSA-4528-x5fx-h6hg, GHSA-6h2x-m376-mqjq, GHSA-6w3j-5fw6-r9vr, GHSA-gg4h-3hg2-grpc, GHSA-q7cg-457f-vx79 +1 more
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.launch-editor@2.6.1: 5 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-c27g-q93r-2cwf, GHSA-r825-w8mm-5pxw, GHSA-v6wh-96g9-6wx3
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.linkify-it@5.0.0: 2 known vulnerabilitiesGHSA-22p9-wv53-3rq4, GHSA-v245-v573-v5vm
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.markdown-it@14.1.1: 5 known vulnerabilitiesGHSA-253c-mchw-3w2r, GHSA-6v5v-wf23-fmfq, GHSA-gfr2-rv44-r23c, GHSA-r7fv-28h4-cvq7, GHSA-vfgh-jcmw-g37q
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.node-forge@1.3.1: 18 known vulnerabilitiesGHSA-2328-f5f3-gj25, GHSA-4487-j8r4-4g2f, GHSA-4642-5mcj-2rqw, GHSA-525v-9gp9-w22h, GHSA-554w-wpv2-vw27 +13 more
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.4.31: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.serialize-javascript@6.0.2: 3 known vulnerabilitiesGHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v, GHSA-qj8w-gfj5-8c6v
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.svgo@2.8.0: 4 known vulnerabilitiesGHSA-2p49-hgcm-8545, GHSA-4vpr-x523-8j87, GHSA-w27v-7q3p-w38r, GHSA-xpqw-6gx7-v673
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tinymce@7.9.2: 3 known vulnerabilitiesGHSA-q742-qvgc-gc2f, GHSA-v98h-vmpc-fpqv, GHSA-vg35-5wq7-3x7w
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@9.0.1: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@6.4.2: 7 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff, GHSA-r825-w8mm-5pxw +2 more
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.webpack-dev-middleware@7.4.5: 1 known vulnerabilityGHSA-g84c-rxfj-3j2c
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@7.5.9: 2 known vulnerabilitiesGHSA-3h5v-q93c-6h6q, GHSA-96hv-2xvq-fx4p
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.20.0: 2 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
vue/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: private-key
legacy/include/OAuth2Mailing/vendor/firebase/php-jwt/README.md:112 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
legacy/include/social/facebook/facebook_sdk/examples/example.php:23 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
legacy/include/social/facebook/facebook_sdk/examples/with_js_sdk.php:7 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key3 matches in this file
legacy/include/social/facebook/facebook_sdk/tests/tests.php:21 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
legacy/service/example/test.html:182 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: private-key
legacy/vendor/firebase/php-jwt/README.md:115 - lowLow. Minor, or common in normal tools. Shown for information.slim/slim@4.14.0: 1 known vulnerabilityGHSA-53h4-8rc4-f539
api/composer.lock - lowLow. Minor, or common in normal tools. Shown for information.symfony/cache@v5.4.46: 1 known vulnerabilityGHSA-6qh9-h6wf-jgqc
api/composer.lock - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.12.10: 1 known vulnerabilityGHSA-4x5r-pxfx-6jf8
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.ajv@6.12.6: 2 known vulnerabilitiesGHSA-2g4f-4pwh-qvx6, GHSA-2g4f-4pwh-qvx6
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.baseline-browser-mapping@2.8.28: 1 known vulnerabilityGHSA-w5vr-8v7q-w6rv
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.bn.js@4.11.9: 1 known vulnerabilityGHSA-378v-28hj-76wf
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.bn.js@4.12.2: 1 known vulnerabilityGHSA-378v-28hj-76wf
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.bn.js@5.1.3: 1 known vulnerabilityGHSA-378v-28hj-76wf
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.bn.js@5.2.2: 1 known vulnerabilityGHSA-378v-28hj-76wf
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.elliptic@6.6.1: 1 known vulnerabilityGHSA-848j-6mx2-7j84
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.follow-redirects@1.15.11: 1 known vulnerabilityGHSA-r4q5-vmmm-2653
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.micromatch@3.1.10: 1 known vulnerabilityGHSA-952p-6rrq-rcjv
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.moment@2.30.1: 1 known vulnerabilityGHSA-4p3w-j4w9-5jqw
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.pbkdf2@3.1.3: 1 known vulnerabilityGHSA-477h-4r7f-fvrx
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@3.1.2: 1 known vulnerabilityGHSA-rj75-hqrm-r3gf
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@6.0.4: 1 known vulnerabilityGHSA-rj75-hqrm-r3gf
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.qs@6.13.0: 5 known vulnerabilitiesGHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.qs@6.5.3: 2 known vulnerabilitiesGHSA-4mjr-xmp4-gh2g, GHSA-6rw7-vpxm-498p
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.request@2.88.2: 1 known vulnerabilityGHSA-p8p7-x288-28g6
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.tough-cookie@2.5.0: 1 known vulnerabilityGHSA-72xf-g2v4-qvf3
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.vue@2.7.16: 1 known vulnerabilityGHSA-5j4c-8p2g-v4jx
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.vue-template-compiler@2.7.16: 1 known vulnerabilityGHSA-g3ch-rx76-35fx
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.webpack-dev-server@3.11.3: 6 known vulnerabilitiesGHSA-4v9v-hfq4-rm2v, GHSA-79cf-xcqc-c78w, GHSA-9jgg-88mc-972h, GHSA-f5vj-f2hx-8m93, GHSA-m28w-2pqf-7qgj +1 more
kanban/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.guzzlehttp/psr7@2.7.1: 4 known vulnerabilitiesGHSA-34xg-wgjx-8xph, GHSA-c2w2-prh8-qm98, GHSA-hq7v-mx3g-29hw, GHSA-vm85-hxw5-5432
legacy/composer.lock - lowLow. Minor, or common in normal tools. Shown for information.phpseclib/phpseclib@3.0.52: 2 known vulnerabilitiesGHSA-m557-wrgg-6rp4, GHSA-q97c-8qh3-fpc6
legacy/composer.lock - lowLow. Minor, or common in normal tools. Shown for information.smarty/smarty@v4.5.5: 2 known vulnerabilitiesGHSA-cq55-c7wv-pxmq, GHSA-f6wf-28g6-769x
legacy/composer.lock - lowLow. Minor, or common in normal tools. Shown for information.firebase/php-jwt@v6.10.1: 1 known vulnerabilityGHSA-2x45-7fc3-mxwq
legacy/include/OAuth2Mailing/composer.lock - lowLow. Minor, or common in normal tools. Shown for information.guzzlehttp/psr7@2.7.0: 4 known vulnerabilitiesGHSA-34xg-wgjx-8xph, GHSA-c2w2-prh8-qm98, GHSA-hq7v-mx3g-29hw, GHSA-vm85-hxw5-5432
legacy/include/OAuth2Mailing/composer.lock - lowLow. Minor, or common in normal tools. Shown for information.guzzlehttp/psr7@2.4.3: 5 known vulnerabilitiesGHSA-34xg-wgjx-8xph, GHSA-c2w2-prh8-qm98, GHSA-hq7v-mx3g-29hw, GHSA-vm85-hxw5-5432, GHSA-wxmh-65f7-jcvw
legacy/vendor/consolidation/output-formatters/composer.lock - lowLow. Minor, or common in normal tools. Shown for information.pygments@2.17.2: 2 known vulnerabilitiesPYSEC-2026-2987, PYSEC-2026-2987
legacy/vendor/mockery/mockery/docs/requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.idna@3.7.0: 1 known vulnerabilityPYSEC-2026-215
legacy/vendor/mockery/mockery/docs/requirements.txt
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Minthcm alternatives
View more →Similar mcp servers in Learning Resources, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Minthcm (this page) minthcm | 438 | AGPL-3.0 | Oct 28, 2026 | Scanned, no flagged issues |
| Dashboard Icons homarr-labs | 9k | Apache-2.0 | Oct 26, 2026 | Scanned, no flagged issues |
| Ha MCP homeassistant-ai | 5.4k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| MCP Server Guide figma | 2.1k | None found | Oct 28, 2026 | Not scanned yet |
| Mcpso chatmcp | 2.1k | Apache-2.0 | Oct 25, 2026 | Scanned, no flagged issues |
| MCP MicrosoftDocs | 2k | CC-BY-4.0 | Oct 30, 2026 | Scanned, no flagged issues |