← Back to search

Flyto Core

flytohub Scanned 17h ago

Secure execution engine for AI agents. 300+ modules, SSRF protection, secrets proxy.

MCP Registry ↗
? Not scanned yet

Versions

2.12.6latest
first seen Jun 5, 2026
2.2.2
first seen May 19, 2026

Tools 0

No tools indexed yet.

Permissions 5

network medium
Server uses network capabilities via: aiohttp, http, httpx, requests, socket, urllib
filesystem low
Server uses filesystem capabilities via: glob, open(), os, pathlib, shutil, tempfile
shell high
Server uses shell capabilities via: os.system(), subprocess
database medium
Server uses database capabilities via: asyncpg, redis, sqlite3
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv()

Scan Findings 145

high
Hardcoded OAuth client secret in flytohub-flyto-core-795d07e/src/core/modules/integrations/oauth/client.py auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: pyyaml@6.0.3,<7 (GHSA-8q59-q68h-6hv4) dependency_analyzer · 95%
medium
Vulnerable dependency: pyyaml@6.0.3,<7 (GHSA-rprw-h62v-c2w7) dependency_analyzer · 95%
medium
Vulnerable dependency: pyyaml@6.0.3,<7 (PYSEC-2018-49) dependency_analyzer · 95%
medium
Vulnerable dependency: pyyaml@6.0.3,<7 (PYSEC-2021-142) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-2fqr-mr3j-6wp8) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-2vrm-gr82-f7m5) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-3wq7-rqq7-wx6j) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-45c4-8wx5-qw6w) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-4fvr-rgm6-gqmc) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-4m7w-qmgq-4wj5) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-54jq-c3m8-4m76) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-5m98-qgg9-wh84) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-63hf-3vf5-4wqf) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-63hw-fmq6-xxg2) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-69f9-5gxw-wvc2) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-6jhg-hg63-jvvf) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-6mq8-rvhq-8wgg) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-7gpw-8wmc-pm8g) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-8495-4g3g-x7pr) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-8qpw-xqxj-h4r2) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-9548-qrrj-x5pj) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-966j-vmvw-g2g9) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-9x8q-7h8h-wcw9) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-c427-h43c-vf67) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-cq5v-8q36-5273) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-fh55-r93g-j68g) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-g3cq-j2xw-wf74) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-g84x-mcqj-x9qq) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-gfw2-4jvh-wgfg) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-hcc4-c3v8-rx92) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-hg6j-4rv6-33pg) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-hpj7-wq8m-9hgp) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-jg22-mg44-37j8) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-jj3x-wxrx-4x23) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-m5qp-6w8w-w647) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-m6qw-4cw2-hm4m) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-mfx4-hv73-q22v) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-mq44-7p77-q5h7) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-mqqc-3gqh-h2x8) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-mwh4-6h8g-pg8w) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-p998-jp59-783m) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-pjjw-qhg8-p2p9) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-q3qx-c6g2-7pw2) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-qvrw-v9rv-5rjx) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-v6wp-4m6f-gcjg) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-w2fm-2cpv-w7v5) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-xcgm-r5h9-7989) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (GHSA-xx9p-xxvh-7g8j) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2021-76) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2023-120) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2023-246) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2023-247) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2023-250) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2023-251) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2024-26) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-1097) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-1098) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-1099) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-1100) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-1101) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-1102) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-1103) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-1104) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-1105) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-1106) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-1107) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-1109) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-2094) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-2095) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-2096) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-2097) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-2098) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-2099) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-2100) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-2101) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-2102) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-2103) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-2104) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-2105) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-2106) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-2107) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-2108) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-2109) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-2110) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-2111) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-2112) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-2113) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-237) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-3545) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-3546) dependency_analyzer · 95%
medium
Vulnerable dependency: aiohttp@3.14.3,<4 (PYSEC-2026-3547) dependency_analyzer · 95%
medium
Vulnerable dependency: lxml@6.1.1,<7 (GHSA-55x5-fj6c-h6m8) dependency_analyzer · 95%
medium
Vulnerable dependency: lxml@6.1.1,<7 (GHSA-57qw-cc2g-pv5p) dependency_analyzer · 95%
medium
Vulnerable dependency: lxml@6.1.1,<7 (GHSA-jq4v-f5q6-mjqq) dependency_analyzer · 95%
medium
Vulnerable dependency: lxml@6.1.1,<7 (GHSA-pgww-xf46-h92r) dependency_analyzer · 95%
medium
Vulnerable dependency: lxml@6.1.1,<7 (GHSA-vfmq-68hx-4jfw) dependency_analyzer · 95%
medium
Vulnerable dependency: lxml@6.1.1,<7 (GHSA-wrxv-2j5q-m38w) dependency_analyzer · 95%
medium
Vulnerable dependency: lxml@6.1.1,<7 (GHSA-xp26-p53h-6h2p) dependency_analyzer · 95%
medium
Vulnerable dependency: lxml@6.1.1,<7 (PYSEC-2014-9) dependency_analyzer · 95%
medium
Vulnerable dependency: lxml@6.1.1,<7 (PYSEC-2018-12) dependency_analyzer · 95%
medium
Vulnerable dependency: lxml@6.1.1,<7 (PYSEC-2021-19) dependency_analyzer · 95%
medium
Vulnerable dependency: lxml@6.1.1,<7 (PYSEC-2021-852) dependency_analyzer · 95%
medium
Vulnerable dependency: lxml@6.1.1,<7 (PYSEC-2022-230) dependency_analyzer · 95%
medium
Vulnerable dependency: lxml@6.1.1,<7 (PYSEC-2026-87) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.13.5,<3 (GHSA-5jqp-qgf6-3pvh) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.13.5,<3 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.13.5,<3 (PYSEC-2021-47) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.13.5,<3 (PYSEC-2026-1812) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.2.2,<2 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.2.2,<2 (PYSEC-2026-2270) dependency_analyzer · 95%
medium
Vulnerable dependency: flyto-core@2.17.0 (GHSA-2956-977x-2w3r) dependency_analyzer · 95%
medium
Vulnerable dependency: flyto-core@2.17.0 (GHSA-794r-5rp2-fpg8) dependency_analyzer · 95%
medium
Vulnerable dependency: flyto-core@2.17.0 (GHSA-c9hr-64h3-gxpc) dependency_analyzer · 95%
medium
Vulnerable dependency: flyto-core@2.17.0 (GHSA-hr7p-wg7r-hg9m) dependency_analyzer · 95%
medium
Vulnerable dependency: flyto-core@2.17.0 (GHSA-pgwh-4jj4-qm8v) dependency_analyzer · 95%
medium
Vulnerable dependency: flyto-core@2.17.0 (GHSA-qq9q-xgm3-xv9g) dependency_analyzer · 95%
medium
Vulnerable dependency: flyto-core@2.17.0 (PYSEC-2026-2481) dependency_analyzer · 95%
medium
Vulnerable dependency: flyto-core@2.17.0 (PYSEC-2026-3568) dependency_analyzer · 95%
medium
Vulnerable dependency: flyto-core@2.17.0 (PYSEC-2026-3569) dependency_analyzer · 95%
medium
Vulnerable dependency: flyto-core@2.17.0 (PYSEC-2026-3570) dependency_analyzer · 95%
medium
Vulnerable dependency: flyto-core@2.17.0 (PYSEC-2026-3571) dependency_analyzer · 95%
medium
Vulnerable dependency: flyto-core@2.17.0 (PYSEC-2026-3572) dependency_analyzer · 95%
medium
Vulnerable dependency: flyto-core@2.17.0 (PYSEC-2026-3573) dependency_analyzer · 95%
medium
High-entropy string (5.99 bits/char) in flytohub-flyto-core-795d07e/tests/test_smart_agent.py:2 entropy_analyzer · 54%
medium
High-entropy string (5.70 bits/char) in flytohub-flyto-core-795d07e/src/core/modules/atomic/verify/spec_runner.py:3 entropy_analyzer · 50%
medium
Hex string literal (>50 chars) in flytohub-flyto-core-795d07e/tests/modules/test_crypto_totp.py:24 entropy_analyzer · 70%
medium
High-entropy string (6.00 bits/char) in flytohub-flyto-core-795d07e/tests/modules/test_reverse_sourcemap.py:39 entropy_analyzer · 54%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (97) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 140 components sbom_generator · 100%
high
Generic API Key Assignment found in flytohub-flyto-core-795d07e/docs/OPERATIONS.md secret_scanner · 75%
critical
Database URL with Password found in flytohub-flyto-core-795d07e/src/core/modules/atomic/database/insert.py secret_scanner · 85%
critical
Database URL with Password found in flytohub-flyto-core-795d07e/src/core/modules/atomic/database/update.py secret_scanner · 85%
critical
Database URL with Password found in flytohub-flyto-core-795d07e/src/core/modules/atomic/database/query.py secret_scanner · 85%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%