Unstract MCP Server
by ZipstackLLM-Driven Extraction of Unstructured Data — Built for API Deployments & ETL Pipeline Workflows
Unstract is an open-source mcp server by Zipstack, written mainly in Python, with 7,384 GitHub stars and the AGPL-3.0 license. Its code was last updated Oct 30, 2026.
Scan summary: scanned Nov 5, 2026 at commit 2043f0d. Seen able to connect to the internet. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
2043f0d · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit1171 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.BuildfailFlagged. This check found an issue. See the findings below.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Network egresswarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (128)
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.exfiltration issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.aiohttp@3.14.3: 72 known vulnerabilitiesGHSA-2g87-pp6c-29x5, GHSA-494j-54xm-rwp3, GHSA-5wr8-gcqf-gqf3, GHSA-6cjc-53gc-5rqm, GHSA-9xw5-w5jj-pvcg +67 more
backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.banks@2.4.2: 36 known vulnerabilitiesPYSEC-2026-3810, PYSEC-2026-4201, PYSEC-2026-4202, GHSA-64vx-6h2c-rjh7, PYSEC-2026-3810 +31 more
backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cryptography@48.0.1: 27 known vulnerabilitiesPYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554, PYSEC-2026-3552, PYSEC-2026-3553 +22 more
backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.django@4.2.30: 8 known vulnerabilitiesPYSEC-2026-3717, PYSEC-2026-4035, GHSA-3h9f-r86x-qvjx, GHSA-8cjm-8mp7-r2xf, GHSA-8qcx-xf44-272x +3 more
backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.djangorestframework@3.17.1: 5 known vulnerabilitiesPYSEC-2026-3827, PYSEC-2026-3828, GHSA-33wh-fxxf-88vv, GHSA-3547-9m27-7rxg, GHSA-xw6w-gcfp-cf8m
backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.25.0: 18 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9vhv-jxww-xfm5, GHSA-cwqr-hh33-gh44 +13 more
backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httplib2@0.31.2: 3 known vulnerabilitiesPYSEC-2026-3444, PYSEC-2026-3444, PYSEC-2026-3444
backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.oauthlib@3.3.1: 20 known vulnerabilitiesPYSEC-2026-4113, PYSEC-2026-4114, GHSA-3jp2-3mrg-2vxc, GHSA-7984-qgvg-3j9c, PYSEC-2026-4113 +15 more
backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.protobuf@4.25.8: 2 known vulnerabilitiesPYSEC-2026-1805, PYSEC-2026-1805
backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyasn1@0.6.3: 42 known vulnerabilitiesPYSEC-2026-3455, PYSEC-2026-3456, PYSEC-2026-3457, GHSA-2qm8-x737-gmw5, GHSA-9m75-vc3g-4x39 +37 more
backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pydrive2@1.15.4: 4 known vulnerabilitiesPYSEC-2023-291, PYSEC-2023-291, PYSEC-2023-291, PYSEC-2023-291
backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pypdf@6.13.3: 288 known vulnerabilitiesPYSEC-2026-3610, PYSEC-2026-3611, PYSEC-2026-3612, PYSEC-2026-3613, PYSEC-2026-3655 +283 more
backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.social-auth-core@4.4.2: 7 known vulnerabilitiesPYSEC-2026-4165, PYSEC-2026-4166, PYSEC-2026-4167, PYSEC-2026-4168, PYSEC-2026-4169 +2 more
backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.soupsieve@2.8.3: 12 known vulnerabilitiesPYSEC-2026-3071, PYSEC-2026-3072, PYSEC-2026-4170, PYSEC-2026-4171, PYSEC-2026-3071 +7 more
backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sqlparse@0.5.5: 5 known vulnerabilitiesPYSEC-2026-3696, PYSEC-2026-3697, PYSEC-2026-3698, PYSEC-2026-3699, PYSEC-2026-3923
backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.7.0: 42 known vulnerabilitiesPYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177, PYSEC-2026-4175, PYSEC-2026-4176 +37 more
backend/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.axios@1.16.0: 20 known vulnerabilitiesGHSA-3pq3-5fj3-cg6v, GHSA-42h9-826w-cgv3, GHSA-44g4-m2mj-wpvx, GHSA-4hqw-qxg8-jxx2, GHSA-542g-h47m-68v8 +15 more
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.12: 7 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.28.1: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.dompurify@3.2.7: 21 known vulnerabilitiesGHSA-39q2-94rc-95cp, GHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4 +16 more
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.dompurify@3.3.1: 21 known vulnerabilitiesGHSA-39q2-94rc-95cp, GHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4 +16 more
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.1.0: 12 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fflate@0.4.8: 1 known vulnerabilityGHSA-px8p-9vwx-vf98
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.follow-redirects@1.16.0: 3 known vulnerabilitiesGHSA-8r9p-f939-6h3c, GHSA-mrwp-f3q8-3g9p, GHSA-q3jh-wrc6-jgq8
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.form-data@4.0.5: 1 known vulnerabilityGHSA-hmw2-7cc7-3qxx
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.happy-dom@20.10.2: 3 known vulnerabilitiesGHSA-5fpq-26gf-qwcr, GHSA-834v-8h66-3h79, GHSA-c8p4-j97h-3vg8
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.immutable@4.3.8: 2 known vulnerabilitiesGHSA-v56q-mh7h-f735, GHSA-xvcm-6775-5m9r
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.1: 4 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.3.1: 1 known vulnerabilityGHSA-2883-xcg3-v3hh
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@3.1.2: 3 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.11: 3 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.16: 1 known vulnerabilityGHSA-2v37-7h3g-55p8
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pdfjs-dist@3.11.174: 1 known vulnerabilityGHSA-wgrm-67xf-hhpq
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@4.0.3: 2 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.6: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rollup@4.57.0: 1 known vulnerabilityGHSA-mw96-cpmx-2vgc
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.socket.io-parser@4.2.6: 1 known vulnerabilityGHSA-2m8v-j782-fhvr
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 1 known vulnerabilityGHSA-68fv-2mgg-jv7q
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@9.0.1: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@7.3.5: 5 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.18.3: 2 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
frontend/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pdfminer-six@20250506: 4 known vulnerabilitiesPYSEC-2026-1761, PYSEC-2026-1762, PYSEC-2026-1761, PYSEC-2026-1762
platform-service/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.soupsieve@2.8: 8 known vulnerabilitiesPYSEC-2026-3071, PYSEC-2026-3072, PYSEC-2026-4170, PYSEC-2026-4171, PYSEC-2026-3071 +3 more
platform-service/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.httplib2@0.22.0: 1 known vulnerabilityPYSEC-2026-3444
unstract/connectors/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.oauthlib@3.2.2: 3 known vulnerabilitiesPYSEC-2026-4113, PYSEC-2026-4114, GHSA-7984-qgvg-3j9c
unstract/connectors/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.protobuf@4.25.9: 2 known vulnerabilitiesPYSEC-2026-1805, PYSEC-2026-1805
unstract/connectors/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pdfminer-six@20250327: 6 known vulnerabilitiesPYSEC-2026-1761, PYSEC-2026-1762, PYSEC-2026-1761, PYSEC-2026-1762, PYSEC-2026-1761 +1 more
unstract/filesystem/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.soupsieve@2.6: 12 known vulnerabilitiesPYSEC-2026-3071, PYSEC-2026-3072, PYSEC-2026-4170, PYSEC-2026-4171, PYSEC-2026-3071 +7 more
unstract/filesystem/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.virtualenv@20.36.1: 19 known vulnerabilitiesPYSEC-2026-4011, PYSEC-2026-4012, PYSEC-2026-4013, PYSEC-2026-4014, GHSA-394h-qwmc-48pf +14 more
unstract/sdk1/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.29.0: 9 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9vhv-jxww-xfm5, GHSA-cwqr-hh33-gh44 +4 more
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.joserfc@1.6.5: 4 known vulnerabilitiesPYSEC-2026-2528, PYSEC-2026-2530, GHSA-9pg5-8c7x-5hfx, GHSA-jpxq-7h8p-2q76
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-engineio@4.13.1: 4 known vulnerabilitiesPYSEC-2026-3032, PYSEC-2026-3033, PYSEC-2026-3032, PYSEC-2026-3033
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-socketio@5.16.1: 2 known vulnerabilitiesPYSEC-2026-3042, PYSEC-2026-3042
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.virtualenv@21.3.3: 19 known vulnerabilitiesPYSEC-2026-4011, PYSEC-2026-4012, PYSEC-2026-4013, PYSEC-2026-4014, GHSA-394h-qwmc-48pf +14 more
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.black@26.3.1: 1 known vulnerabilityGHSA-cg8m-r9f2-5wm2
workers/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Install or build failed in a clean environmentude` or `exclude`) 2. use a `src-layout` 3. explicitly set `py_modules` or `packages` with a list of names To find more information, look for "package discovery" on setuptools docs. hint: Build failures usually indicate a problem with the package or the build environment
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Install contacted hosts other than package registriesreleases.astral.sh
- lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
backend/mcp_server/tests/test_no_credential_leak.py:57 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key2 matches in this file
frontend/src/components/deployments/manage-keys/ManageKeys.test.jsx:34 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header6 matches in this file
docs/agent-kv-api.md:391 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
frontend/src/components/ui/shims/testid-forwarding.test.jsx:224 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
frontend/src/components/pipelines-or-deployments/notification-modal/CreateNotification.test.jsx:11 - lowLow. Minor, or common in normal tools. Shown for information.azure-identity@1.16.0: 1 known vulnerabilityPYSEC-2026-1209
backend/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.h2@4.3.0: 9 known vulnerabilitiesPYSEC-2026-3628, PYSEC-2026-3628, PYSEC-2026-3628, PYSEC-2026-3628, PYSEC-2026-3628 +4 more
backend/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.hpack@4.1.0: 9 known vulnerabilitiesPYSEC-2026-4053, PYSEC-2026-4053, PYSEC-2026-4053, PYSEC-2026-4053, PYSEC-2026-4053 +4 more
backend/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.multidict@6.7.1: 3 known vulnerabilitiesPYSEC-2026-4244, PYSEC-2026-4244, PYSEC-2026-4244
backend/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.39.1: 2 known vulnerabilitiesGHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h
backend/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pygments@2.19.2: 6 known vulnerabilitiesPYSEC-2026-2987, PYSEC-2026-2987, PYSEC-2026-2987, PYSEC-2026-2987, PYSEC-2026-2987 +1 more
backend/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pynacl@1.6.0: 2 known vulnerabilitiesPYSEC-2026-3002, PYSEC-2026-3002
backend/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.setuptools@82.0.0: 6 known vulnerabilitiesPYSEC-2026-3447, GHSA-xmj3-9gf7-h52w, PYSEC-2026-3447, GHSA-xmj3-9gf7-h52w, PYSEC-2026-3447 +1 more
backend/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.social-auth-app-django@5.3.0: 2 known vulnerabilitiesPYSEC-2026-1931, PYSEC-2026-1932
backend/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.tinytag@2.2.1: 5 known vulnerabilitiesGHSA-24cc-9352-h2pg, GHSA-24cc-9352-h2pg, GHSA-24cc-9352-h2pg, GHSA-24cc-9352-h2pg, GHSA-24cc-9352-h2pg
backend/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.ujson@5.12.1: 8 known vulnerabilitiesPYSEC-2026-2294, PYSEC-2026-2294, PYSEC-2026-2294, PYSEC-2026-2294, PYSEC-2026-2294 +3 more
backend/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.28.6: 1 known vulnerabilityGHSA-4x5r-pxfx-6jf8
frontend/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.@opentelemetry/core@2.2.0: 1 known vulnerabilityGHSA-8988-4f7v-96qf
frontend/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.@opentelemetry/core@2.5.0: 1 known vulnerabilityGHSA-8988-4f7v-96qf
frontend/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.@protobufjs/utf8@1.1.0: 1 known vulnerabilityGHSA-q6x5-8v7m-xcrf
frontend/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.@remix-run/router@1.23.2: 1 known vulnerabilityGHSA-2j2x-hqr9-3h42
frontend/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.@vitest/mocker@3.2.6: 2 known vulnerabilitiesGHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8
frontend/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.ajv@8.17.1: 1 known vulnerabilityGHSA-2g4f-4pwh-qvx6
frontend/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.baseline-browser-mapping@2.9.19: 1 known vulnerabilityGHSA-w5vr-8v7q-w6rv
frontend/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.glob@10.5.0: 1 known vulnerabilityGHSA-3g3m-2fjr-6pw4
frontend/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.json-2-csv@5.5.10: 1 known vulnerabilityGHSA-g27c-q7cp-mhx6
frontend/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.minimatch@10.2.6: 1 known vulnerabilityGHSA-g3hv-75wg-m249
frontend/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.minimatch@9.0.9: 1 known vulnerabilityGHSA-g3hv-75wg-m249
frontend/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.moment@2.30.1: 1 known vulnerabilityGHSA-4p3w-j4w9-5jqw
frontend/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@6.0.10: 1 known vulnerabilityGHSA-rj75-hqrm-r3gf
frontend/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.react-router@6.30.3: 3 known vulnerabilitiesGHSA-2j2x-hqr9-3h42, GHSA-337j-9hxr-rhxg, GHSA-wrjc-x8rr-h8h6
frontend/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.react-router-dom@6.30.3: 1 known vulnerabilityGHSA-jjmj-jmhj-qwj2
frontend/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.vitest@3.2.6: 1 known vulnerabilityGHSA-82fw-gwwq-j7x9
frontend/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.yaml@1.10.2: 1 known vulnerabilityGHSA-48c2-rrv3-qjmp
frontend/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.filelock@3.20.3: 12 known vulnerabilitiesGHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-69hj-f68j-2879 +7 more
platform-service/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.37.0: 1 known vulnerabilityGHSA-xcq7-p3pf-p88h
platform-service/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.setuptools@80.9.0: 12 known vulnerabilitiesPYSEC-2026-3447, GHSA-xmj3-9gf7-h52w, PYSEC-2026-3447, GHSA-xmj3-9gf7-h52w, PYSEC-2026-3447 +7 more
platform-service/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.werkzeug@3.1.6: 4 known vulnerabilitiesPYSEC-2026-4312, PYSEC-2026-4312, PYSEC-2026-4312, PYSEC-2026-4312
platform-service/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.34.1: 1 known vulnerabilityGHSA-xcq7-p3pf-p88h
runner/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.32.0: 1 known vulnerabilityGHSA-xcq7-p3pf-p88h
tool-sidecar/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.pynacl@1.5.0: 2 known vulnerabilitiesPYSEC-2026-3002, PYSEC-2026-3002
unstract/connectors/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.setuptools@80.10.2: 2 known vulnerabilitiesPYSEC-2026-3447, GHSA-xmj3-9gf7-h52w
unstract/connectors/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.45.0: 1 known vulnerabilityGHSA-xcq7-p3pf-p88h
unstract/sdk1/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.setuptools@82.0.1: 2 known vulnerabilitiesPYSEC-2026-3447, GHSA-xmj3-9gf7-h52w
uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.31.1: 1 known vulnerabilityGHSA-xcq7-p3pf-p88h
x2text-service/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.setuptools@78.1.1: 2 known vulnerabilitiesPYSEC-2026-3447, GHSA-xmj3-9gf7-h52w
x2text-service/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Network activity
During install
files.pythonhosted.orgpypi.orgreleases.astral.sh
While running
Not run — the code wasn't started in this scan
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Unstract alternatives
View more →Similar mcp servers in Web Scraping & Data, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Unstract (this page) Zipstack | 7.4k | AGPL-3.0 | Oct 30, 2026 | Scanned, no flagged issues |
| Scrapling D4Vinci | 91k | BSD-3-Clause | Oct 31, 2026 | Scanned, no flagged issues |
| Apify MCP Server apify | 14k | MIT | Oct 31, 2026 | Scanned, no flagged issues |
| Firecrawl MCP Server firecrawl | 7.7k | MIT | Oct 29, 2026 | Scanned, no flagged issues |
| Exa MCP Server exa-labs | 5.2k | MIT | Oct 30, 2026 | Scanned, no flagged issues |
| Brightdata MCP brightdata | 2.7k | MIT | Oct 29, 2026 | Scanned, no flagged issues |