Xiaozhi Esp32 Server MCP Server
by xinnan-tech本项目为xiaozhi-esp32提供后端服务，帮助您快速搭建ESP32设备控制服务器。Backend service for xiaozhi-esp32, helps you quickly build an ESP32 device control server.
Xiaozhi Esp32 Server is an open-source mcp server by xinnan-tech, written mainly in JavaScript, with 11,112 GitHub stars and the MIT license. Its code was last updated Nov 1, 2026.
Scan summary: scanned Nov 5, 2026 at commit 4f6e9ec. Seen able to run dynamic code, connect to the internet. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
4f6e9ec · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit376 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Buildn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (127)
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Contacts a hard-coded IP address instead of a domain name.
main/xiaozhi-server/core/providers/tts/index_stream.py:27 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Turns off TLS certificate checking, allowing traffic interception.
main/xiaozhi-server/plugins_func/functions/search_from_ragflow.py:52 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.com.google.guava:guava@33.6.0-jre: 1 known vulnerabilityGHSA-xxph-c9ww-hj94
main/manager-api/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.apache.shiro:shiro-core@2.0.2: 4 known vulnerabilitiesGHSA-c4qc-4q9p-m9q9, GHSA-fcvm-3cpj-f9qx, GHSA-m8g6-vrr2-x7ff, GHSA-x96m-rh44-vgv8
main/manager-api/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.jsoup:jsoup@1.22.2: 2 known vulnerabilitiesGHSA-65r4-943x-97jj, GHSA-pmhh-3w7g-xqp8
main/manager-api/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.com.fasterxml.jackson.core:jackson-core@2.18.2: 4 known vulnerabilitiesGHSA-72hv-8253-57qq, GHSA-7hhh-6rmp-j9qf, GHSA-p6pp-m3f8-5c89, GHSA-r7wm-3cxj-wff9
main/manager-api/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.com.fasterxml.jackson.core:jackson-databind@2.18.2: 13 known vulnerabilitiesGHSA-3pjw-73gf-8qr5, GHSA-5gvw-p9qm-jgwh, GHSA-5jmj-h7xm-6q6v, GHSA-cxp5-3px4-pw24, GHSA-gx83-3vf8-gh7j +8 more
main/manager-api/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.com.squareup.okhttp3:okhttp@3.12.13: 1 known vulnerabilityGHSA-3cqm-mf7h-prrj
main/manager-api/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.commons-beanutils:commons-beanutils@1.9.4: 1 known vulnerabilityGHSA-wxr5-93ph-8wr9
main/manager-api/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.io.netty:netty-codec@4.1.118.Final: 3 known vulnerabilitiesGHSA-3p8m-j85q-pgmj, GHSA-558v-64gr-wgg4, GHSA-mj4r-2hfc-f8p6
main/manager-api/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.assertj:assertj-core@3.26.3: 1 known vulnerabilityGHSA-rqfh-9r24-8c9r
main/manager-api/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.springframework.boot:spring-boot@3.4.3: 2 known vulnerabilitiesGHSA-rc42-6c7j-7h5r, GHSA-wwpq-f5c3-7hvx
main/manager-api/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.springframework.data:spring-data-commons@3.4.3: 4 known vulnerabilitiesGHSA-5m4m-73w9-8433, GHSA-5vpf-xvv7-c8vh, GHSA-88fw-v6x4-3f58, GHSA-9fw2-h3hf-293r
main/manager-api/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.springframework:spring-core@6.2.3: 2 known vulnerabilitiesGHSA-659m-px2c-25wj, GHSA-jmp9-x22r-554x
main/manager-api/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.springframework:spring-expression@6.2.3: 3 known vulnerabilitiesGHSA-9f52-rjqv-25qv, GHSA-r5w3-xv2f-j59q, GHSA-wxpp-56q6-5pcg
main/manager-api/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@babel/plugin-transform-modules-systemjs@7.25.9: 1 known vulnerabilityGHSA-fv7c-fp4j-7gwp
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@intlify/core-base@9.1.9: 3 known vulnerabilitiesGHSA-8rc2-428q-7ww3, GHSA-p2ph-7g93-hw3m, GHSA-x8qp-wqqm-57ph
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@intlify/message-resolver@9.1.9: 1 known vulnerabilityGHSA-p2ph-7g93-hw3m
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@vue/server-renderer@3.4.21: 1 known vulnerabilityGHSA-g2v6-rqmx-r4w6
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@vue/server-renderer@3.5.15: 1 known vulnerabilityGHSA-g2v6-rqmx-r4w6
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.adm-zip@0.5.16: 8 known vulnerabilitiesGHSA-7q85-xj36-vmfc, GHSA-8238-w5pm-2374, GHSA-c6fg-446q-cg94, GHSA-j5f4-cc29-5x44, GHSA-p634-w6r4-rjp2 +3 more
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.axios@1.7.9: 33 known vulnerabilitiesGHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3w6x-2g7m-8v23, GHSA-42h9-826w-cgv3 +28 more
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@1.20.3: 2 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.12: 7 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.0.1: 8 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +3 more
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.24.2: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.25.0: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.defu@6.1.4: 1 known vulnerabilityGHSA-737v-mqg7-c878
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.0.6: 12 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.flatted@3.3.3: 2 known vulnerabilitiesGHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.glob@11.0.0: 2 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.jpeg-js@0.3.7: 2 known vulnerabilitiesGHSA-w7q9-p3jq-fmhm, GHSA-xvf7-4v9q-58w6
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-cookie@3.0.5: 1 known vulnerabilityGHSA-qjx8-664m-686j
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@3.14.1: 5 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.0: 5 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash@4.17.21: 2 known vulnerabilitiesGHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@10.0.1: 4 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@3.1.2: 3 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@8.0.4: 4 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@9.0.5: 4 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mockjs@1.1.0: 1 known vulnerabilityGHSA-mh8j-9jvh-gjf6
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.8: 3 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.path-to-regexp@0.1.10: 2 known vulnerabilitiesGHSA-37ch-88jc-xwx2, GHSA-rhx6-c78j-4q9w
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@2.3.1: 2 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@4.0.2: 2 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.3: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rollup@4.41.1: 1 known vulnerabilityGHSA-mw96-cpmx-2vgc
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 1 known vulnerabilityGHSA-68fv-2mgg-jv7q
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@5.2.8: 20 known vulnerabilitiesGHSA-356w-63v5-8wf4, GHSA-4r4m-qw57-chr8, GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-64vr-g452-qvp3 +15 more
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@7.5.10: 1 known vulnerabilityGHSA-96hv-2xvq-fx4p
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.18.0: 2 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
main/manager-mobile/pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.32.7: 13 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-6627-m3xw-93mp, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9c4x-gm8v-wgc4 +8 more
main/xiaozhi-server/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.google-cloud-aiplatform@1.71.1: 1 known vulnerabilityPYSEC-2026-2500
main/xiaozhi-server/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.9: 8 known vulnerabilitiesPYSEC-2026-1851, PYSEC-2026-1852, PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038 +3 more
main/xiaozhi-server/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.setuptools@9.1.0: 4 known vulnerabilitiesPYSEC-2022-43012, PYSEC-2025-49, PYSEC-2026-1918, PYSEC-2026-3447
main/xiaozhi-server/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.transformers@5.9.0: 1 known vulnerabilityPYSEC-2026-3929
main/xiaozhi-server/requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
main/manager-mobile/src/pages/agent/components/agentSnapshotUtils.test.mjs:114 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
main/manager-mobile/src/pages/agent/components/agentSnapshotUtils.test.mjs:116 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
main/manager-mobile/src/pages/agent/components/agentSnapshotUtils.test.mjs:117 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
main/manager-mobile/src/pages/agent/components/agentSnapshotUtils.test.mjs:138 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
main/manager-mobile/src/pages/agent/components/agentSnapshotUtils.test.mjs:140 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
main/manager-mobile/src/pages/agent/components/agentSnapshotUtils.test.mjs:141 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
main/manager-web/src/components/agentSnapshotDisplayUtils.test.mjs:72 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
main/manager-web/src/components/agentSnapshotDisplayUtils.test.mjs:74 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
main/manager-web/src/components/agentSnapshotDisplayUtils.test.mjs:75 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
main/manager-web/src/components/agentSnapshotDisplayUtils.test.mjs:98 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
main/manager-web/src/components/agentSnapshotDisplayUtils.test.mjs:100 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
main/manager-web/src/components/agentSnapshotDisplayUtils.test.mjs:101 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
docs/voiceprint-integration.md:230 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key2 matches in this file
docs/mqtt-gateway-integration.md:147 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key3 matches in this file
main/manager-api/src/test/java/xiaozhi/common/utils/AESUtilsTest.java:11 - lowLow. Minor, or common in normal tools. Shown for information.org.apache.shiro:shiro-spring@2.0.2: 1 known vulnerabilityGHSA-c244-p6m5-vqj6
main/manager-api/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.apache.shiro:shiro-web@2.0.2: 2 known vulnerabilitiesGHSA-c6r4-qjmw-cvj2, GHSA-m8g6-vrr2-x7ff
main/manager-api/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.ch.qos.logback:logback-core@1.5.16: 4 known vulnerabilitiesGHSA-25qh-j22f-pwp8, GHSA-jhq6-gfmj-v8fx, GHSA-p47f-322f-whfh, GHSA-qqpg-mvqg-649v
main/manager-api/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.apache.logging.log4j:log4j-api@2.24.3: 1 known vulnerabilityGHSA-qv9r-c865-cp47
main/manager-api/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.springframework.boot:spring-boot-autoconfigure@3.4.3: 1 known vulnerabilityGHSA-ggg2-9786-hwc8
main/manager-api/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.springframework.data:spring-data-keyvalue@3.4.3: 1 known vulnerabilityGHSA-xg2j-3hj6-pc24
main/manager-api/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.springframework:spring-context@6.2.3: 1 known vulnerabilityGHSA-4wp7-92pw-q264
main/manager-api/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.springframework:spring-web@6.2.3: 2 known vulnerabilitiesGHSA-6r3c-xf4w-jxjm, GHSA-7m2p-62gw-p8qq
main/manager-api/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.org.springframework:spring-websocket@6.2.3: 2 known vulnerabilitiesGHSA-7fch-4f2f-jcgm, GHSA-q723-847q-5g8g
main/manager-api/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.26.0: 1 known vulnerabilityGHSA-4x5r-pxfx-6jf8
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@babel/helpers@7.26.0: 1 known vulnerabilityGHSA-968p-4wvh-cqc8
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@babel/runtime@7.26.0: 1 known vulnerabilityGHSA-968p-4wvh-cqc8
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@eslint/plugin-kit@0.2.8: 1 known vulnerabilityGHSA-xffm-g5w8-qvg7
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@eslint/plugin-kit@0.3.2: 1 known vulnerabilityGHSA-xffm-g5w8-qvg7
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@humanfs/node@0.16.6: 1 known vulnerabilityGHSA-p498-v437-472g
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.@tootallnate/once@1.1.2: 1 known vulnerabilityGHSA-vpq2-c234-7xj6
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.ajv@6.12.6: 1 known vulnerabilityGHSA-2g4f-4pwh-qvx6
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.ajv@8.17.1: 1 known vulnerabilityGHSA-2g4f-4pwh-qvx6
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.deepmerge@4.3.1: 1 known vulnerabilityGHSA-gcqx-w48m-w2h4
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.20.2: 1 known vulnerabilityGHSA-67mh-4wv8-2f99
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.24.2: 1 known vulnerabilityGHSA-67mh-4wv8-2f99
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.follow-redirects@1.15.9: 1 known vulnerabilityGHSA-r4q5-vmmm-2653
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.min-document@2.19.0: 1 known vulnerabilityGHSA-rx8g-88g5-qh64
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.phin@2.9.3: 1 known vulnerabilityGHSA-x565-32qp-m3vf
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@6.1.2: 2 known vulnerabilitiesGHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@7.0.0: 1 known vulnerabilityGHSA-rj75-hqrm-r3gf
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.qs@6.13.0: 5 known vulnerabilitiesGHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.yaml@1.10.2: 1 known vulnerabilityGHSA-48c2-rrv3-qjmp
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.yaml@2.5.1: 1 known vulnerabilityGHSA-48c2-rrv3-qjmp
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.yaml@2.6.1: 1 known vulnerabilityGHSA-48c2-rrv3-qjmp
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.yaml@2.8.0: 1 known vulnerabilityGHSA-48c2-rrv3-qjmp
main/manager-mobile/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Xiaozhi Esp32 Server alternatives
View more →Similar mcp servers in Smart Home & IoT, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Xiaozhi Esp32 Server (this page) xinnan-tech | 11k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Esp32 Nat Router martin-ger | 2.2k | None found | Oct 21, 2026 | Not scanned yet |
| Arduino Mcp2515 autowp | 1k | MIT | Feb 27, 2026 | Scanned, no flagged issues |
| Home Assistant Vibecode Agent Coolver | 651 | MIT | Oct 21, 2026 | Scanned, no flagged issues |
| Bagel Extelligence-ai | 400 | Apache-2.0 | Oct 19, 2026 | Scanned, no flagged issues |
| Hass MCP voska | 352 | MIT | Oct 24, 2026 | Scanned, no flagged issues |