Voltagent MCP Server

by VoltAgent• 11k•• Scanned•Claim this listing•Request removal
Developer Toolsagentsaiai agentsai agents frameworkaiagentframework

AI Agent Engineering Platform built on an Open Source TypeScript AI Agent Framework

Voltagent is an open-source mcp server by VoltAgent, written mainly in TypeScript, with 10,907 GitHub stars and the MIT license. Its code was last updated Oct 15, 2026.

Scan summary: scanned Nov 5, 2026 at commit 7fa718a. Seen able to run dynamic code, connect to the internet. Scan policy

Scanned
Full scan at 7fa718a · Nov 5, 2026
Scanned
Static code scanwarn
Secrets scanfail
Dependency audit1131 known vulnerabilitiesfail
Manifestnonewarn
Buildfail
Boot & handshaken/a
Network egresswarn
Reproducible (×3)n/a

Findings (200)

  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    github.com/modelcontextprotocol/go-sdk@1.2.0: 4 known vulnerabilities
    GO-2026-4569, GO-2026-4770, GO-2026-4773, GO-2026-5771
    examples/with-mcp-elicitation/go-server/go.mod
  • medium
    @hono/node-server@1.19.7: 3 known vulnerabilities
    GHSA-92pp-h63x-v22m, GHSA-frvp-7c67-39w9, GHSA-wc8c-qw6v-h7f6
    packages/server-elysia/example/pnpm-lock.yaml
  • medium
    @modelcontextprotocol/sdk@1.25.1: 8 known vulnerabilities
    GHSA-22jm-h49p-29qw, GHSA-345p-7cg4-v4c7, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h +3 more
    packages/server-elysia/example/pnpm-lock.yaml
  • medium
    body-parser@1.20.4: 2 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
    packages/server-elysia/example/pnpm-lock.yaml
  • medium
    body-parser@2.2.1: 2 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
    packages/server-elysia/example/pnpm-lock.yaml
  • medium
    elysia@1.4.19: 3 known vulnerabilities
    GHSA-8hq9-phh3-p2wp, GHSA-9643-4qgh-g8mx, GHSA-f45g-68q3-5w8x
    packages/server-elysia/example/pnpm-lock.yaml
  • medium
    fast-uri@3.1.0: 12 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
    packages/server-elysia/example/pnpm-lock.yaml
  • medium
    hono@4.11.3: 40 known vulnerabilities
    GHSA-26pp-8wgv-hjvm, GHSA-2gcr-mfcq-wcc3, GHSA-3hrh-pfw6-9m5x, GHSA-3vhc-576x-3qv4, GHSA-458j-xx4x-4375 +35 more
    packages/server-elysia/example/pnpm-lock.yaml
  • medium
    nanoid@5.1.6: 4 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-xwg4-73v4-xw9w, GHSA-28wg-ghj8-5hjv, GHSA-xwg4-73v4-xw9w
    packages/server-elysia/example/pnpm-lock.yaml
  • medium
    path-to-regexp@0.1.12: 2 known vulnerabilities
    GHSA-37ch-88jc-xwx2, GHSA-37ch-88jc-xwx2
    packages/server-elysia/example/pnpm-lock.yaml
  • medium
    path-to-regexp@8.3.0: 4 known vulnerabilities
    GHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f, GHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f
    packages/server-elysia/example/pnpm-lock.yaml
  • medium
    uuid@11.1.0: 2 known vulnerabilities
    GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq
    packages/server-elysia/example/pnpm-lock.yaml
  • medium
    uuid@9.0.1: 3 known vulnerabilities
    GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq
    packages/server-elysia/example/pnpm-lock.yaml
  • medium
    ws@8.18.3: 4 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p, GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    packages/server-elysia/example/pnpm-lock.yaml
  • medium
    zod@3.25.76: 2 known vulnerabilities
    GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
    packages/server-elysia/example/pnpm-lock.yaml
  • medium
    zod@4.2.1: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    packages/server-elysia/example/pnpm-lock.yaml
  • medium
    @fastify/busboy@2.1.1: 2 known vulnerabilities
    GHSA-gxm5-99cw-xjw9, GHSA-x8mw-p69m-v3mx
    pnpm-lock.yaml
  • medium
    @fastify/busboy@3.2.0: 3 known vulnerabilities
    GHSA-gxm5-99cw-xjw9, GHSA-x8mw-p69m-v3mx, GHSA-xjh9-v7x6-24jw
    pnpm-lock.yaml
  • medium
    @fastify/static@7.0.4: 2 known vulnerabilities
    GHSA-83w8-p2f5-377r, GHSA-8pvw-jcv7-9cmj
    pnpm-lock.yaml
  • medium
    @graphql-tools/utils@10.11.0: 2 known vulnerabilities
    GHSA-7mx3-vvmw-hjmv, GHSA-c4qx-w738-7hr3
    pnpm-lock.yaml
  • medium
    @grpc/grpc-js@1.13.4: 4 known vulnerabilities
    GHSA-5375-pq7m-f5r2, GHSA-99f4-grh7-6pcq, GHSA-f596-whhp-79r4, GHSA-m9gg-hp2v-232j
    pnpm-lock.yaml
  • medium
    @grpc/grpc-js@1.14.3: 4 known vulnerabilities
    GHSA-5375-pq7m-f5r2, GHSA-99f4-grh7-6pcq, GHSA-f596-whhp-79r4, GHSA-m9gg-hp2v-232j
    pnpm-lock.yaml
  • medium
    @hono/node-server@1.18.2: 3 known vulnerabilities
    GHSA-92pp-h63x-v22m, GHSA-frvp-7c67-39w9, GHSA-wc8c-qw6v-h7f6
    pnpm-lock.yaml
  • medium
    @isaacs/brace-expansion@5.0.0: 1 known vulnerability
    GHSA-7h2j-956f-4vf2
    pnpm-lock.yaml
  • medium
    @langchain/core@0.3.70: 1 known vulnerability
    GHSA-r399-636x-v7f6
    pnpm-lock.yaml
  • medium
    @modelcontextprotocol/sdk@1.17.2: 8 known vulnerabilities
    GHSA-345p-7cg4-v4c7, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-8r9q-7v3j-jr4g +3 more
    pnpm-lock.yaml
  • medium
    @modelcontextprotocol/sdk@1.30.0: 6 known vulnerabilities
    GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
    pnpm-lock.yaml
  • medium
    @vue/server-renderer@3.5.22: 1 known vulnerability
    GHSA-g2v6-rqmx-r4w6
    pnpm-lock.yaml
  • medium
    adm-zip@0.5.16: 8 known vulnerabilities
    GHSA-7q85-xj36-vmfc, GHSA-8238-w5pm-2374, GHSA-c6fg-446q-cg94, GHSA-j5f4-cc29-5x44, GHSA-p634-w6r4-rjp2 +3 more
    pnpm-lock.yaml
  • medium
    axios@0.21.4: 23 known vulnerabilities
    GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-43fc-jf86-j433, GHSA-5c9x-8gcm-mpgx, GHSA-62hf-57xw-28j9 +18 more
    pnpm-lock.yaml
  • medium
    axios@1.11.0: 32 known vulnerabilities
    GHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3w6x-2g7m-8v23, GHSA-42h9-826w-cgv3 +27 more
    pnpm-lock.yaml
  • medium
    axios@1.13.2: 35 known vulnerabilities
    GHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3pq3-5fj3-cg6v, GHSA-3w6x-2g7m-8v23 +30 more
    pnpm-lock.yaml
  • medium
    axios@1.13.5: 34 known vulnerabilities
    GHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3pq3-5fj3-cg6v, GHSA-3w6x-2g7m-8v23 +29 more
    pnpm-lock.yaml
  • medium
    body-parser@1.20.3: 2 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
    pnpm-lock.yaml
  • medium
    body-parser@2.2.0: 3 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6, GHSA-wqch-xfxh-vrr4
    pnpm-lock.yaml
  • medium
    body-parser@2.3.0: 1 known vulnerability
    GHSA-27r3-jxmh-p828
    pnpm-lock.yaml
  • medium
    brace-expansion@1.1.12: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    pnpm-lock.yaml
  • medium
    brace-expansion@2.0.2: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    pnpm-lock.yaml
  • medium
    browserslist@4.25.2: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    pnpm-lock.yaml
  • medium
    cross-spawn@5.1.0: 1 known vulnerability
    GHSA-3xgq-45jj-v275
    pnpm-lock.yaml
  • medium
    defu@6.1.4: 1 known vulnerability
    GHSA-737v-mqg7-c878
    pnpm-lock.yaml
  • medium
    devalue@5.3.2: 13 known vulnerabilities
    GHSA-33hq-fvwr-56pm, GHSA-4q55-j62x-fr9h, GHSA-8qm3-746x-r74r, GHSA-9rgm-9g3h-6x36, GHSA-cfw5-2vxh-hr84 +8 more
    pnpm-lock.yaml
  • medium
    dompurify@3.3.0: 21 known vulnerabilities
    GHSA-39q2-94rc-95cp, GHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4 +16 more
    pnpm-lock.yaml
  • medium
    effect@3.17.7: 1 known vulnerability
    GHSA-38f7-945m-qr2g
    pnpm-lock.yaml
  • medium
    extract-zip@2.0.1: 2 known vulnerabilities
    GHSA-7pqw-9j4j-h8q3, GHSA-jmr9-qjv8-65gv
    pnpm-lock.yaml
  • medium
    fast-uri@2.4.0: 12 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
    pnpm-lock.yaml
  • medium
    fast-uri@3.0.6: 12 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
    pnpm-lock.yaml
  • medium
    fastify@4.29.1: 9 known vulnerabilities
    GHSA-444r-cwp2-x5xf, GHSA-4mh8-r7rc-xpvc, GHSA-667r-xxjv-c9mm, GHSA-9q9j-q6p8-xq58, GHSA-hwr6-493r-vm6h +4 more
    pnpm-lock.yaml
  • medium
    fflate@0.8.2: 1 known vulnerability
    GHSA-px8p-9vwx-vf98
    pnpm-lock.yaml
  • medium
    figlet@1.8.2: 1 known vulnerability
    GHSA-62ch-8vmq-8xm7
    pnpm-lock.yaml
  • medium
    find-my-way@8.2.2: 1 known vulnerability
    GHSA-c96f-x56v-gq3h
    pnpm-lock.yaml
  • medium
    flatted@3.3.3: 2 known vulnerabilities
    GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
    pnpm-lock.yaml
  • medium
    form-data@4.0.4: 1 known vulnerability
    GHSA-hmw2-7cc7-3qxx
    pnpm-lock.yaml
  • medium
    form-data@4.0.5: 1 known vulnerability
    GHSA-hmw2-7cc7-3qxx
    pnpm-lock.yaml
  • medium
    glob@10.4.5: 2 known vulnerabilities
    GHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
    pnpm-lock.yaml
  • medium
    glob@11.0.3: 2 known vulnerabilities
    GHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
    pnpm-lock.yaml
  • medium
    graphql-scalars@1.25.0: 1 known vulnerability
    GHSA-x8rm-f576-gq67
    pnpm-lock.yaml
  • medium
    h3@1.13.0: 5 known vulnerabilities
    GHSA-22cc-p3c6-wpvm, GHSA-4hxc-9384-m385, GHSA-72gr-qfp7-vwhw, GHSA-mp2g-9vg9-f4cg, GHSA-wr4h-v87w-p3r7
    pnpm-lock.yaml
  • medium
    h3@1.15.4: 5 known vulnerabilities
    GHSA-22cc-p3c6-wpvm, GHSA-4hxc-9384-m385, GHSA-72gr-qfp7-vwhw, GHSA-mp2g-9vg9-f4cg, GHSA-wr4h-v87w-p3r7
    pnpm-lock.yaml
  • medium
    hono@4.10.8: 40 known vulnerabilities
    GHSA-26pp-8wgv-hjvm, GHSA-2gcr-mfcq-wcc3, GHSA-3hrh-pfw6-9m5x, GHSA-3vhc-576x-3qv4, GHSA-458j-xx4x-4375 +35 more
    pnpm-lock.yaml
  • medium
    hono@4.9.1: 44 known vulnerabilities
    GHSA-26pp-8wgv-hjvm, GHSA-2gcr-mfcq-wcc3, GHSA-3hrh-pfw6-9m5x, GHSA-3vhc-576x-3qv4, GHSA-458j-xx4x-4375 +39 more
    pnpm-lock.yaml
  • medium
    image-size@2.0.2: 2 known vulnerabilities
    GHSA-5p2g-fcmc-qvqq, GHSA-w3rx-r6r6-pgpr
    pnpm-lock.yaml
  • medium
    ip-address@10.0.1: 6 known vulnerabilities
    GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more
    pnpm-lock.yaml
  • medium
    js-yaml@3.14.1: 10 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +5 more
    pnpm-lock.yaml
  • medium
    js-yaml@4.1.0: 10 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +5 more
    pnpm-lock.yaml
  • medium
    js-yaml@4.1.1: 4 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
    pnpm-lock.yaml
  • medium
    jsondiffpatch@0.6.0: 2 known vulnerabilities
    GHSA-33vc-wfww-vjfv, GHSA-j4fx-xxwh-2485
    pnpm-lock.yaml
  • medium
    jws@3.2.2: 1 known vulnerability
    GHSA-869p-cjfg-cm3x
    pnpm-lock.yaml
  • medium
    langsmith@0.3.58: 4 known vulnerabilities
    GHSA-3644-q5cj-c5c7, GHSA-fw9q-39r9-c252, GHSA-rr7j-v2q5-chgv, GHSA-v34v-rq6j-cj6p
    pnpm-lock.yaml
  • medium
    launch-editor@2.11.1: 4 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-r825-w8mm-5pxw, GHSA-v6wh-96g9-6wx3
    pnpm-lock.yaml
  • medium
    lodash@4.17.21: 4 known vulnerabilities
    GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg, GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
    pnpm-lock.yaml
  • medium
    lodash-es@4.17.21: 4 known vulnerabilities
    GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg, GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
    pnpm-lock.yaml
  • medium
    minimatch@10.0.3: 4 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • medium
    minimatch@10.1.2: 4 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • medium
    minimatch@3.0.5: 3 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
    pnpm-lock.yaml
  • medium
    minimatch@3.1.2: 6 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +1 more
    pnpm-lock.yaml
  • medium
    minimatch@5.1.6: 3 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
    pnpm-lock.yaml
  • medium
    minimatch@8.0.4: 4 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • medium
    minimatch@9.0.3: 8 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249, GHSA-23c5-xmqv-rm74 +3 more
    pnpm-lock.yaml
  • medium
    minimatch@9.0.5: 4 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • medium
    multer@2.0.2: 9 known vulnerabilities
    GHSA-3p4h-7m6x-2hcm, GHSA-535w-7cp7-47q4, GHSA-5528-5vmv-3xc2, GHSA-72gw-mp4g-v24j, GHSA-q7qp-rjg7-q26m +4 more
    pnpm-lock.yaml
  • medium
    multiparty@4.2.3: 3 known vulnerabilities
    GHSA-65x3-rw7q-gx94, GHSA-qxch-whhj-8956, GHSA-xh3c-6gcq-g4rv
    pnpm-lock.yaml
  • medium
    nanoid@3.3.11: 3 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
    pnpm-lock.yaml
  • medium
    node-forge@1.3.1: 36 known vulnerabilities
    GHSA-2328-f5f3-gj25, GHSA-4487-j8r4-4g2f, GHSA-4642-5mcj-2rqw, GHSA-525v-9gp9-w22h, GHSA-554w-wpv2-vw27 +31 more
    pnpm-lock.yaml
  • medium
    node-forge@1.3.3: 15 known vulnerabilities
    GHSA-2328-f5f3-gj25, GHSA-4487-j8r4-4g2f, GHSA-4642-5mcj-2rqw, GHSA-525v-9gp9-w22h, GHSA-5cwg-6vw7-rj6p +10 more
    pnpm-lock.yaml
  • medium
    pacote@15.2.0: 1 known vulnerability
    GHSA-w4pp-8pjf-rmxw
    pnpm-lock.yaml
  • medium
    picomatch@2.3.1: 4 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    pnpm-lock.yaml
  • medium
    picomatch@4.0.2: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    pnpm-lock.yaml
  • medium
    picomatch@4.0.3: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    pnpm-lock.yaml
  • medium
    playwright@1.51.1: 1 known vulnerability
    GHSA-7mvr-c777-76hp
    pnpm-lock.yaml
  • medium
    playwright@1.54.2: 1 known vulnerability
    GHSA-7mvr-c777-76hp
    pnpm-lock.yaml
  • medium
    postcss@8.4.31: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    pnpm-lock.yaml
  • medium
    postcss@8.5.6: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    pnpm-lock.yaml
  • medium
    react-router@7.8.0: 14 known vulnerabilities
    GHSA-2j2x-hqr9-3h42, GHSA-2w69-qvjg-hvjx, GHSA-337j-9hxr-rhxg, GHSA-3cgp-3xvw-98x8, GHSA-49rj-9fvp-4h2h +9 more
    pnpm-lock.yaml
  • medium
    rollup@4.50.2: 1 known vulnerability
    GHSA-mw96-cpmx-2vgc
    pnpm-lock.yaml
  • medium
    serialize-javascript@6.0.2: 6 known vulnerabilities
    GHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v, GHSA-qj8w-gfj5-8c6v, GHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v +1 more
    pnpm-lock.yaml
  • medium
    sharp@0.33.5: 3 known vulnerabilities
    GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    pnpm-lock.yaml
  • medium
    sharp@0.34.4: 3 known vulnerabilities
    GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    pnpm-lock.yaml
  • medium
    sigstore@1.9.0: 1 known vulnerability
    GHSA-52v5-jr5w-gjxr
    pnpm-lock.yaml
  • medium
    socket.io-parser@4.2.5: 2 known vulnerabilities
    GHSA-2m8v-j782-fhvr, GHSA-677m-j7p3-52f9
    pnpm-lock.yaml
  • medium
    source-map-js@1.2.1: 2 known vulnerabilities
    GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
    pnpm-lock.yaml
  • medium
    svgo@4.0.0: 4 known vulnerabilities
    GHSA-2p49-hgcm-8545, GHSA-4vpr-x523-8j87, GHSA-w27v-7q3p-w38r, GHSA-xpqw-6gx7-v673
    pnpm-lock.yaml
  • medium
    tar-fs@2.1.3: 1 known vulnerability
    GHSA-vj76-c3g6-qr5v
    pnpm-lock.yaml
  • medium
    tar-fs@3.1.0: 1 known vulnerability
    GHSA-vj76-c3g6-qr5v
    pnpm-lock.yaml
  • medium
    tmp@0.0.33: 2 known vulnerabilities
    GHSA-52f5-9888-hmc6, GHSA-ph9p-34f9-6g65
    pnpm-lock.yaml
  • medium
    tmp@0.2.5: 1 known vulnerability
    GHSA-ph9p-34f9-6g65
    pnpm-lock.yaml
  • medium
    toml@3.0.0: 6 known vulnerabilities
    GHSA-4qx8-w7c3-pj3p, GHSA-82x6-q7mm-w9cf, GHSA-9j65-hcg3-gc64, GHSA-9qmh-m7c6-f92p, GHSA-h895-cgqg-jf52 +1 more
    pnpm-lock.yaml
  • medium
    undici@5.29.0: 16 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52, GHSA-4992-7rv2-5pvq, GHSA-8xcm-r25x-g524 +11 more
    pnpm-lock.yaml
  • medium
    undici@6.21.3: 19 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52, GHSA-4992-7rv2-5pvq, GHSA-4qv8-2p9j-2685 +14 more
    pnpm-lock.yaml
  • medium
    undici@7.16.0: 31 known vulnerabilities
    GHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52 +26 more
    pnpm-lock.yaml
  • medium
    uuid@10.0.0: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    pnpm-lock.yaml
  • medium
    uuid@13.0.0: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    pnpm-lock.yaml
  • medium
    ws@8.18.0: 2 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    pnpm-lock.yaml
  • medium
    zod@3.22.3: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    pnpm-lock.yaml
  • medium
    zod@4.1.11: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    pnpm-lock.yaml
  • medium
    zod@4.3.5: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    pnpm-lock.yaml
  • medium
    @babel/plugin-transform-modules-systemjs@7.25.9: 1 known vulnerability
    GHSA-fv7c-fp4j-7gwp
    website/package-lock.json
  • medium
    body-parser@1.20.2: 3 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-qwcr-r2fm-qrc7, GHSA-v422-hmwv-36x6
    website/package-lock.json
  • medium
    brace-expansion@1.1.11: 8 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +3 more
    website/package-lock.json
  • medium
    brace-expansion@2.0.1: 8 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +3 more
    website/package-lock.json
  • medium
    braces@3.0.2: 1 known vulnerability
    GHSA-grv7-fg5c-xmjg
    website/package-lock.json
  • medium
    browserslist@4.24.3: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    website/package-lock.json
  • medium
    compression@1.7.4: 1 known vulnerability
    GHSA-vc2v-76pw-4v95
    website/package-lock.json
  • medium
    cross-spawn@7.0.3: 1 known vulnerability
    GHSA-3xgq-45jj-v275
    website/package-lock.json
  • medium
    dompurify@3.1.6: 23 known vulnerabilities
    GHSA-39q2-94rc-95cp, GHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4 +18 more
    website/package-lock.json
  • medium
    glob@10.3.10: 2 known vulnerabilities
    GHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
    website/package-lock.json
  • medium
    http-proxy-middleware@2.0.6: 4 known vulnerabilities
    GHSA-4www-5p9h-95mh, GHSA-64mm-vxmg-q3vj, GHSA-9gqv-wp59-fq42, GHSA-c7qv-q95q-8v27
    website/package-lock.json
  • medium
    image-size@1.1.1: 2 known vulnerabilities
    GHSA-m5qc-5hw7-8vg7, GHSA-w3rx-r6r6-pgpr
    website/package-lock.json
  • medium
    joi@17.12.2: 6 known vulnerabilities
    GHSA-4528-x5fx-h6hg, GHSA-6h2x-m376-mqjq, GHSA-6w3j-5fw6-r9vr, GHSA-gg4h-3hg2-grpc, GHSA-q7cg-457f-vx79 +1 more
    website/package-lock.json
  • medium
    launch-editor@2.6.1: 5 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-c27g-q93r-2cwf, GHSA-r825-w8mm-5pxw, GHSA-v6wh-96g9-6wx3
    website/package-lock.json
  • medium
    nanoid@3.3.7: 4 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-mwcw-c2x4-8c55, GHSA-xwg4-73v4-xw9w
    website/package-lock.json
  • medium
    path-to-regexp@0.1.7: 2 known vulnerabilities
    GHSA-37ch-88jc-xwx2, GHSA-rhx6-c78j-4q9w
    website/package-lock.json
  • medium
    path-to-regexp@1.8.0: 1 known vulnerability
    GHSA-9wv6-86v2-598j
    website/package-lock.json
  • medium
    postcss@8.4.49: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    website/package-lock.json
  • medium
    svgo@2.8.0: 4 known vulnerabilities
    GHSA-2p49-hgcm-8545, GHSA-4vpr-x523-8j87, GHSA-w27v-7q3p-w38r, GHSA-xpqw-6gx7-v673
    website/package-lock.json
  • medium
    tmp@0.2.3: 2 known vulnerabilities
    GHSA-52f5-9888-hmc6, GHSA-ph9p-34f9-6g65
    website/package-lock.json
  • medium
    uuid@8.3.2: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    website/package-lock.json
  • medium
    webpack-dev-middleware@5.3.4: 1 known vulnerability
    GHSA-g84c-rxfj-3j2c
    website/package-lock.json
  • medium
    ws@7.5.9: 2 known vulnerabilities
    GHSA-3h5v-q93c-6h6q, GHSA-96hv-2xvq-fx4p
    website/package-lock.json
  • medium
    ws@8.16.0: 3 known vulnerabilities
    GHSA-3h5v-q93c-6h6q, GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    website/package-lock.json
  • medium
    Install or build failed in a clean environment
    - voltagent-example-with-workspace:build - voltagent-example-with-xquik-tools:build - voltagent-example-with-youtube-to-blog:build - voltagent-example-with-zapier-mcp:build Failed tasks: - voltagent-example-netlify-functions:build  ELIFECYCLE  Command failed with exit code 1.
  • medium
    Install contacted hosts other than package registries
    cdn.playwright.dev, opencollective.com, playwright.download.prss.microsoft.com, telemetry.nextjs.org
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    examples/next-js-chatbot-starter-template/lib/tools/calculator.ts:24
  • low
    Possible example credential in docs/tests: curl-auth-header
    CONSOLE.md:284
  • low
    Possible example credential in docs/tests: generic-api-key
    examples/with-jwt-auth/README.md:65
  • low
    Possible example credential in docs/tests: jwt
    examples/with-voltagent-actions/src/config.ts:66
  • low
    Possible example credential in docs/tests: airtable-api-key
    2 matches in this file
    examples/with-voltagent-actions/README.md:103
  • low
    Possible example credential in docs/tests: curl-auth-header
    packages/core/CHANGELOG.md:6551
  • low
    Possible example credential in docs/tests: curl-auth-header
    2 matches in this file
    CHANGELOG.md:4446
  • low
    Possible example credential in docs/tests: airtable-api-key
    2 matches in this file
    website/actions-triggers-docs/actions/airtable.md:18
  • low
    Possible example credential in docs/tests: curl-auth-header
    website/docs/rag/pinecone.md:541
  • low
    Possible example credential in docs/tests: curl-auth-header
    website/docs/api/api-reference.md:221
  • low
    Possible example credential in docs/tests: discord-client-id
    3 matches in this file
    website/actions-triggers-docs/actions/discord.md:21
  • low
    Possible example credential in docs/tests: curl-auth-header
    website/docs/api/authentication.md:526
  • low
    Possible example credential in docs/tests: curl-auth-header
    packages/server-hono/CHANGELOG.md:2274
  • low
    @ai-sdk/provider-utils@3.0.19: 2 known vulnerabilities
    GHSA-866g-f22w-33x8, GHSA-866g-f22w-33x8
    packages/server-elysia/example/pnpm-lock.yaml
  • low
    @opentelemetry/core@2.0.1: 1 known vulnerability
    GHSA-8988-4f7v-96qf
    packages/server-elysia/example/pnpm-lock.yaml
  • low
    @opentelemetry/core@2.1.0: 1 known vulnerability
    GHSA-8988-4f7v-96qf
    packages/server-elysia/example/pnpm-lock.yaml
  • low
    @opentelemetry/core@2.2.0: 1 known vulnerability
    GHSA-8988-4f7v-96qf
    packages/server-elysia/example/pnpm-lock.yaml
  • low
    @protobufjs/utf8@1.1.0: 2 known vulnerabilities
    GHSA-q6x5-8v7m-xcrf, GHSA-q6x5-8v7m-xcrf
    packages/server-elysia/example/pnpm-lock.yaml
  • low
    ajv@8.17.1: 2 known vulnerabilities
    GHSA-2g4f-4pwh-qvx6, GHSA-2g4f-4pwh-qvx6
    packages/server-elysia/example/pnpm-lock.yaml
  • low
    file-type@21.2.0: 2 known vulnerabilities
    GHSA-5v7r-6r5c-r473, GHSA-j47w-4g3g-c36v
    packages/server-elysia/example/pnpm-lock.yaml
  • low
    qs@6.14.0: 10 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883 +5 more
    packages/server-elysia/example/pnpm-lock.yaml
  • low
    @ai-sdk/provider-utils@2.2.8: 1 known vulnerability
    GHSA-866g-f22w-33x8
    pnpm-lock.yaml
  • low
    @ai-sdk/provider-utils@3.0.11: 1 known vulnerability
    GHSA-866g-f22w-33x8
    pnpm-lock.yaml
  • low
    @ai-sdk/provider-utils@3.0.16: 1 known vulnerability
    GHSA-866g-f22w-33x8
    pnpm-lock.yaml
  • low
    @ai-sdk/provider-utils@3.0.17: 1 known vulnerability
    GHSA-866g-f22w-33x8
    pnpm-lock.yaml
  • low
    @ai-sdk/provider-utils@4.0.1: 1 known vulnerability
    GHSA-866g-f22w-33x8
    pnpm-lock.yaml
  • low
    @ai-sdk/provider-utils@4.0.8: 1 known vulnerability
    GHSA-866g-f22w-33x8
    pnpm-lock.yaml
  • low
    @babel/core@7.28.0: 1 known vulnerability
    GHSA-4x5r-pxfx-6jf8
    pnpm-lock.yaml
  • low
    @babel/core@7.28.5: 1 known vulnerability
    GHSA-4x5r-pxfx-6jf8
    pnpm-lock.yaml
  • low
    @hey-api/openapi-ts@0.97.1: 1 known vulnerability
    GHSA-hhx9-57xq-r5rw
    pnpm-lock.yaml
  • low
    @hono/node-server@1.19.17: 1 known vulnerability
    GHSA-rmxm-3fg6-px4f
    pnpm-lock.yaml
  • low
    @humanfs/node@0.16.6: 1 known vulnerability
    GHSA-p498-v437-472g
    pnpm-lock.yaml
  • low
    @nuxt/ui@4.0.1: 1 known vulnerability
    GHSA-gj2h-2fpw-fhv9
    pnpm-lock.yaml
  • low
    @octokit/request@6.2.8: 1 known vulnerability
    GHSA-rmvr-2pp2-xj38
    pnpm-lock.yaml
  • low
    @octokit/request-error@3.0.3: 1 known vulnerability
    GHSA-xx4v-prfh-6cgc
    pnpm-lock.yaml

Network activity

During install
cdn.playwright.devgithub.comnodejs.orgopencollective.complaywright.download.prss.microsoft.comregistry.npmjs.orgrelease-assets.githubusercontent.comtelemetry.nextjs.org
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Voltagent alternatives

View more →

Similar mcp servers in Developer Tools, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Voltagent (this page)
VoltAgent
11kMITOct 15, 2026Scanned, no flagged issues
MCP Use
mcp-use
11kMITOct 30, 2026Scanned, no flagged issues
MobileBuildMCP
getsentry
6.5kMITNov 1, 2026Scanned, no flagged issues
Gemini Notebook MCP CLI
jacob-bd
6.4kMITOct 27, 2026Scanned, no flagged issues
Mcporter
openclaw
5.1kMITOct 27, 2026Scanned, no flagged issues
Flint Chart
microsoft
4.5kMITNov 1, 2026Scanned, no flagged issues