← Back to search
@microsoft/agentos-mcp-server
Public Preview — AgentOS MCP Server for Claude Desktop: Build, deploy, and manage policy-compliant autonomous agents
D
40 / 100
Versions
@microsoft/agentos-mcp-server4.0.0latestMay 29, 2026
3.7.0May 19, 2026
3.6.0May 12, 2026
3.5.0May 8, 2026
3.4.0May 5, 2026
+ show 8 moreshow less
3.3.0Apr 30, 2026
3.2.2Apr 22, 2026
3.2.1Apr 22, 2026
3.2.0Apr 22, 2026
3.1.0Apr 13, 2026
3.0.2Apr 2, 2026
1.0.2Apr 1, 2026
1.0.1Mar 31, 2026
@microsoft/agentmesh-mcp-proxy4.0.0latestMay 29, 2026
3.7.0May 19, 2026
3.6.0May 12, 2026
3.5.0May 8, 2026
3.4.0May 5, 2026
+ show 7 moreshow less
3.3.0Apr 30, 2026
3.2.2Apr 22, 2026
3.2.1Apr 22, 2026
3.2.0Apr 22, 2026
3.1.0Apr 13, 2026
3.0.2Apr 2, 2026
1.0.0Mar 31, 2026
3.7.0latestMay 18, 2026
3.6.0May 18, 2026
3.5.0May 8, 2026
3.4.0May 5, 2026
3.3.0Apr 27, 2026
+ show 12 moreshow less
3.2.2Apr 22, 2026
3.2.1Apr 22, 2026
3.2.0Apr 22, 2026
3.1.1Apr 21, 2026
3.1.0Apr 11, 2026
3.0.1Apr 1, 2026
3.0.0Mar 26, 2026
2.3.0Mar 26, 2026
2.2.0Mar 18, 2026
1.1.0Mar 8, 2026
1.0.1Mar 6, 2026
1.0.0Mar 4, 2026
Tools 0
No tools indexed yet.
Permissions 0
No permissions indexed yet.
Scan Findings 1068
medium
No build provenance detected (SLSA L0)
medium
Vulnerable dependency: pypdf@6.10.2 (GHSA-5hgr-hg42-57jg)
medium
Vulnerable dependency: pypdf@6.10.2 (GHSA-5qjq-93h5-hrgp)
medium
Vulnerable dependency: pypdf@6.10.2 (GHSA-5xf7-4p34-54qr)
medium
Vulnerable dependency: pypdf@6.10.2 (GHSA-cj93-chg6-vgv8)
medium
Vulnerable dependency: pypdf@6.10.2 (GHSA-fp3f-mc75-235c)
medium
Vulnerable dependency: pypdf@6.10.2 (GHSA-fwg2-594c-jp42)
medium
Vulnerable dependency: pypdf@6.10.2 (GHSA-g867-7843-wf8q)
medium
Vulnerable dependency: pypdf@6.10.2 (GHSA-g9xf-7f8q-9mcj)
medium
Vulnerable dependency: pypdf@6.10.2 (GHSA-j543-4vmf-qm7v)
medium
Vulnerable dependency: pypdf@6.10.2 (GHSA-jm82-fx9c-mx94)
medium
Vulnerable dependency: pypdf@6.10.2 (GHSA-m2v9-299j-rv96)
medium
Vulnerable dependency: pypdf@6.10.2 (GHSA-wjqc-6w8f-h24c)
medium
Vulnerable dependency: pypdf@6.10.2 (PYSEC-2026-3004)
medium
Vulnerable dependency: pypdf@6.10.2 (PYSEC-2026-3009)
medium
Vulnerable dependency: pypdf@6.10.2 (PYSEC-2026-3010)
medium
Vulnerable dependency: pypdf@6.10.2 (PYSEC-2026-3016)
medium
Vulnerable dependency: pypdf@6.10.2 (PYSEC-2026-3018)
medium
Vulnerable dependency: pypdf@6.10.2 (PYSEC-2026-3020)
medium
Vulnerable dependency: pypdf@6.10.2 (PYSEC-2026-3022)
medium
Vulnerable dependency: pypdf@6.10.2 (PYSEC-2026-3025)
medium
Vulnerable dependency: pypdf@6.10.2 (PYSEC-2026-3610)
medium
Vulnerable dependency: pypdf@6.10.2 (PYSEC-2026-3611)
medium
Vulnerable dependency: pypdf@6.10.2 (PYSEC-2026-3612)
medium
Vulnerable dependency: pypdf@6.10.2 (PYSEC-2026-3613)
medium
Vulnerable dependency: pypdf@6.10.2 (PYSEC-2026-3655)
medium
Vulnerable dependency: pypdf@6.10.2 (PYSEC-2026-3656)
medium
Vulnerable dependency: nltk@3.9.4 (GHSA-6hm5-jgcp-p838)
medium
Vulnerable dependency: nltk@3.9.4 (GHSA-fg7f-2386-8897)
medium
Vulnerable dependency: nltk@3.9.4 (GHSA-m42h-3232-vpv3)
medium
Vulnerable dependency: nltk@3.9.4 (GHSA-p4gq-832x-fm9v)
medium
Vulnerable dependency: nltk@3.9.4 (GHSA-qvv7-cg9c-w4x3)
medium
Vulnerable dependency: nltk@3.9.4 (GHSA-xh95-f55m-82fw)
medium
Vulnerable dependency: nltk@3.9.4 (PYSEC-2026-2078)
medium
Vulnerable dependency: nltk@3.9.4 (PYSEC-2026-3581)
medium
Vulnerable dependency: nltk@3.9.4 (PYSEC-2026-3582)
medium
Vulnerable dependency: nltk@3.9.4 (PYSEC-2026-3583)
medium
Vulnerable dependency: nltk@3.9.4 (PYSEC-2026-3584)
medium
Vulnerable dependency: nltk@3.9.4 (PYSEC-2026-597)
medium
Vulnerable dependency: aiohttp@3.13.4 (GHSA-2fqr-mr3j-6wp8)
medium
Vulnerable dependency: aiohttp@3.13.4 (GHSA-4fvr-rgm6-gqmc)
medium
Vulnerable dependency: aiohttp@3.13.4 (GHSA-4m7w-qmgq-4wj5)
medium
Vulnerable dependency: aiohttp@3.13.4 (GHSA-63hw-fmq6-xxg2)
medium
Vulnerable dependency: aiohttp@3.13.4 (GHSA-9x8q-7h8h-wcw9)
medium
Vulnerable dependency: aiohttp@3.13.4 (GHSA-cq5v-8q36-5273)
medium
Vulnerable dependency: aiohttp@3.13.4 (GHSA-g3cq-j2xw-wf74)
medium
Vulnerable dependency: aiohttp@3.13.4 (GHSA-hg6j-4rv6-33pg)
medium
Vulnerable dependency: aiohttp@3.13.4 (GHSA-hpj7-wq8m-9hgp)
medium
Vulnerable dependency: aiohttp@3.13.4 (GHSA-jg22-mg44-37j8)
medium
Vulnerable dependency: aiohttp@3.13.4 (GHSA-m6qw-4cw2-hm4m)
medium
Vulnerable dependency: aiohttp@3.13.4 (GHSA-mfx4-hv73-q22v)
medium
Vulnerable dependency: aiohttp@3.13.4 (GHSA-mq44-7p77-q5h7)
medium
Vulnerable dependency: aiohttp@3.13.4 (GHSA-xcgm-r5h9-7989)
medium
Vulnerable dependency: aiohttp@3.13.4 (PYSEC-2026-2104)
medium
Vulnerable dependency: aiohttp@3.13.4 (PYSEC-2026-2105)
medium
Vulnerable dependency: aiohttp@3.13.4 (PYSEC-2026-2106)
medium
Vulnerable dependency: aiohttp@3.13.4 (PYSEC-2026-2107)
medium
Vulnerable dependency: aiohttp@3.13.4 (PYSEC-2026-2108)
medium
Vulnerable dependency: aiohttp@3.13.4 (PYSEC-2026-2109)
medium
Vulnerable dependency: aiohttp@3.13.4 (PYSEC-2026-2110)
medium
Vulnerable dependency: aiohttp@3.13.4 (PYSEC-2026-2111)
medium
Vulnerable dependency: aiohttp@3.13.4 (PYSEC-2026-2112)
medium
Vulnerable dependency: aiohttp@3.13.4 (PYSEC-2026-2113)
medium
Vulnerable dependency: aiohttp@3.13.4 (PYSEC-2026-237)
medium
Vulnerable dependency: aiohttp@3.13.4 (PYSEC-2026-3545)
medium
Vulnerable dependency: aiohttp@3.13.4 (PYSEC-2026-3546)
medium
Vulnerable dependency: aiohttp@3.13.4 (PYSEC-2026-3547)
medium
Vulnerable dependency: pytest@7.4.0 (GHSA-6w46-j5rx-g56g)
medium
Vulnerable dependency: pytest@7.4.0 (PYSEC-2026-1845)
medium
Vulnerable dependency: pytest@8.0 (GHSA-6w46-j5rx-g56g)
medium
Vulnerable dependency: pytest@8.0 (PYSEC-2026-1845)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w)
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616)
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617)
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618)
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482)
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483)
medium
Vulnerable dependency: pydantic@2.0,<3.0 (GHSA-5jqp-qgf6-3pvh)
medium
Vulnerable dependency: pydantic@2.0,<3.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.0,<3.0 (PYSEC-2021-47)
medium
Vulnerable dependency: pydantic@2.0,<3.0 (PYSEC-2026-1812)
medium
Vulnerable dependency: pyyaml@6.0,<7.0 (GHSA-8q59-q68h-6hv4)
medium
Vulnerable dependency: pyyaml@6.0,<7.0 (GHSA-rprw-h62v-c2w7)
medium
Vulnerable dependency: pyyaml@6.0,<7.0 (PYSEC-2018-49)
medium
Vulnerable dependency: pyyaml@6.0,<7.0 (PYSEC-2021-142)
medium
Vulnerable dependency: cryptography@46.0.7,<51.0 (GHSA-3ww4-gg4f-jr7f)
medium
Vulnerable dependency: cryptography@46.0.7,<51.0 (GHSA-9v9h-cgj8-h64p)
medium
Vulnerable dependency: cryptography@46.0.7,<51.0 (GHSA-hggm-jpg3-v476)
medium
Vulnerable dependency: cryptography@46.0.7,<51.0 (GHSA-jwv3-5hgf-82ww)
medium
Vulnerable dependency: cryptography@46.0.7,<51.0 (GHSA-m2h6-j472-rp4c)
medium
Vulnerable dependency: cryptography@46.0.7,<51.0 (GHSA-m959-cc7f-wv43)
medium
Vulnerable dependency: cryptography@46.0.7,<51.0 (GHSA-q3cj-2r34-2cwc)
medium
Vulnerable dependency: cryptography@46.0.7,<51.0 (GHSA-r6ph-v2qm-q3c2)
medium
Vulnerable dependency: cryptography@46.0.7,<51.0 (PYSEC-2017-8)
medium
Vulnerable dependency: cryptography@46.0.7,<51.0 (PYSEC-2021-62)
medium
Vulnerable dependency: cryptography@46.0.7,<51.0 (PYSEC-2026-1283)
medium
Vulnerable dependency: cryptography@46.0.7,<51.0 (PYSEC-2026-1285)
medium
Vulnerable dependency: cryptography@46.0.7,<51.0 (PYSEC-2026-2141)
medium
Vulnerable dependency: cryptography@46.0.7,<51.0 (PYSEC-2026-35)
medium
Vulnerable dependency: cryptography@46.0.7,<51.0 (PYSEC-2026-3553)
medium
Vulnerable dependency: cryptography@46.0.7,<51.0 (PYSEC-2026-3554)
medium
Vulnerable dependency: pynacl@1.5.0,<2.0 (GHSA-mrfv-m5wm-5w6w)
medium
Vulnerable dependency: pynacl@1.5.0,<2.0 (PYSEC-2026-3002)
medium
Vulnerable dependency: httpx@0.27.0,<1.0 (GHSA-h8pj-cxx2-jfg2)
medium
Vulnerable dependency: httpx@0.27.0,<1.0 (PYSEC-2022-183)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-2fqr-mr3j-6wp8)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-2vrm-gr82-f7m5)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-3wq7-rqq7-wx6j)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-45c4-8wx5-qw6w)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-4fvr-rgm6-gqmc)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-4m7w-qmgq-4wj5)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-54jq-c3m8-4m76)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-5m98-qgg9-wh84)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-63hf-3vf5-4wqf)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-63hw-fmq6-xxg2)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-69f9-5gxw-wvc2)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-6jhg-hg63-jvvf)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-6mq8-rvhq-8wgg)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-7gpw-8wmc-pm8g)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-8495-4g3g-x7pr)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-8qpw-xqxj-h4r2)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-9548-qrrj-x5pj)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-966j-vmvw-g2g9)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-9x8q-7h8h-wcw9)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-c427-h43c-vf67)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-cq5v-8q36-5273)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-fh55-r93g-j68g)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-g3cq-j2xw-wf74)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-g84x-mcqj-x9qq)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-gfw2-4jvh-wgfg)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-hcc4-c3v8-rx92)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-hg6j-4rv6-33pg)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-hpj7-wq8m-9hgp)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-jg22-mg44-37j8)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-jj3x-wxrx-4x23)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-m5qp-6w8w-w647)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-m6qw-4cw2-hm4m)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-mfx4-hv73-q22v)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-mq44-7p77-q5h7)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-mqqc-3gqh-h2x8)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-mwh4-6h8g-pg8w)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-p998-jp59-783m)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-pjjw-qhg8-p2p9)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-q3qx-c6g2-7pw2)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-qvrw-v9rv-5rjx)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-v6wp-4m6f-gcjg)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-w2fm-2cpv-w7v5)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-xcgm-r5h9-7989)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-xx9p-xxvh-7g8j)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2021-76)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2023-120)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2023-246)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2023-247)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2023-250)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2023-251)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2024-26)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-1097)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-1098)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-1099)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-1100)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-1101)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-1102)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-1103)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-1104)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-1105)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-1106)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-1107)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-1109)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-2094)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-2095)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-2096)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-2097)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-2098)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-2099)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-2100)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-2101)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-2102)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-2103)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-2104)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-2105)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-2106)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-2107)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-2108)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-2109)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-2110)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-2111)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-2112)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-2113)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-237)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-3545)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-3546)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2026-3547)
medium
Vulnerable dependency: click@8.1.0,<9.0 (PYSEC-2026-2132)
medium
Vulnerable dependency: pydantic@2.4.0,<3.0 (GHSA-5jqp-qgf6-3pvh)
medium
Vulnerable dependency: pydantic@2.4.0,<3.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.4.0,<3.0 (PYSEC-2021-47)
medium
Vulnerable dependency: pydantic@2.4.0,<3.0 (PYSEC-2026-1812)
medium
Vulnerable dependency: pydantic@2.5.0,<3.0 (GHSA-5jqp-qgf6-3pvh)
medium
Vulnerable dependency: pydantic@2.5.0,<3.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.5.0,<3.0 (PYSEC-2021-47)
medium
Vulnerable dependency: pydantic@2.5.0,<3.0 (PYSEC-2026-1812)
medium
Vulnerable dependency: click@8.0,<9.0 (PYSEC-2026-2132)
medium
Vulnerable dependency: pydantic@2.13.4,<3.0 (GHSA-5jqp-qgf6-3pvh)
medium
Vulnerable dependency: pydantic@2.13.4,<3.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.13.4,<3.0 (PYSEC-2021-47)
medium
Vulnerable dependency: pydantic@2.13.4,<3.0 (PYSEC-2026-1812)
medium
Vulnerable dependency: mcp@1.0.0,<2.0 (GHSA-3qhf-m339-9g5v)
medium
Vulnerable dependency: mcp@1.0.0,<2.0 (GHSA-9h52-p55h-vw2f)
medium
Vulnerable dependency: mcp@1.0.0,<2.0 (GHSA-j975-95f5-7wqh)
medium
Vulnerable dependency: mcp@1.0.0,<2.0 (GHSA-jpw9-pfvf-9f58)
medium
Vulnerable dependency: mcp@1.0.0,<2.0 (GHSA-vj7q-gjh5-988w)
medium
Vulnerable dependency: mcp@1.0.0,<2.0 (PYSEC-2026-1616)
medium
Vulnerable dependency: mcp@1.0.0,<2.0 (PYSEC-2026-1617)
medium
Vulnerable dependency: mcp@1.0.0,<2.0 (PYSEC-2026-1618)
medium
Vulnerable dependency: mcp@1.0.0,<2.0 (PYSEC-2026-3482)
medium
Vulnerable dependency: mcp@1.0.0,<2.0 (PYSEC-2026-3483)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (GHSA-3ww4-gg4f-jr7f)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (GHSA-9v9h-cgj8-h64p)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (GHSA-hggm-jpg3-v476)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (GHSA-jwv3-5hgf-82ww)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (GHSA-m2h6-j472-rp4c)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (GHSA-m959-cc7f-wv43)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (GHSA-q3cj-2r34-2cwc)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (GHSA-r6ph-v2qm-q3c2)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (PYSEC-2017-8)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (PYSEC-2021-62)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (PYSEC-2026-1283)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (PYSEC-2026-1285)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (PYSEC-2026-2141)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (PYSEC-2026-35)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (PYSEC-2026-3553)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (PYSEC-2026-3554)
medium
Vulnerable dependency: llama-index-core@0.12,<0.13 (GHSA-3wxx-q3gv-pvvv)
medium
Vulnerable dependency: llama-index-core@0.12,<0.13 (GHSA-488g-hw5f-x29p)
medium
Vulnerable dependency: llama-index-core@0.12,<0.13 (GHSA-7753-xrfw-ch36)
medium
Vulnerable dependency: llama-index-core@0.12,<0.13 (GHSA-cr7q-2w66-hjcm)
medium
Vulnerable dependency: llama-index-core@0.12,<0.13 (GHSA-fxc2-8m62-m85x)
medium
Vulnerable dependency: llama-index-core@0.12,<0.13 (GHSA-j3wr-m6xh-64hg)
medium
Vulnerable dependency: llama-index-core@0.12,<0.13 (GHSA-r6gp-rff2-p3hf)
medium
Vulnerable dependency: llama-index-core@0.12,<0.13 (GHSA-wvpx-g427-q9wc)
medium
Vulnerable dependency: llama-index-core@0.12,<0.13 (PYSEC-2026-1559)
medium
Vulnerable dependency: llama-index-core@0.12,<0.13 (PYSEC-2026-1560)
medium
Vulnerable dependency: llama-index-core@0.12,<0.13 (PYSEC-2026-1561)
medium
Vulnerable dependency: llama-index-core@0.12,<0.13 (PYSEC-2026-1562)
medium
Vulnerable dependency: llama-index-core@0.12,<0.13 (PYSEC-2026-1563)
medium
Vulnerable dependency: llama-index-core@0.12,<0.13 (PYSEC-2026-395)
medium
Vulnerable dependency: llama-index-core@0.12,<0.13 (PYSEC-2026-396)
medium
Vulnerable dependency: llama-index-core@0.12,<0.13 (PYSEC-2026-397)
medium
Vulnerable dependency: pydantic@2.4.0,<3.0.0 (GHSA-5jqp-qgf6-3pvh)
medium
Vulnerable dependency: pydantic@2.4.0,<3.0.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.4.0,<3.0.0 (PYSEC-2021-47)
medium
Vulnerable dependency: pydantic@2.4.0,<3.0.0 (PYSEC-2026-1812)
medium
Vulnerable dependency: pyyaml@6.0.0,<7.0 (GHSA-8q59-q68h-6hv4)
medium
Vulnerable dependency: pyyaml@6.0.0,<7.0 (GHSA-rprw-h62v-c2w7)
medium
Vulnerable dependency: pyyaml@6.0.0,<7.0 (PYSEC-2018-49)
medium
Vulnerable dependency: pyyaml@6.0.0,<7.0 (PYSEC-2021-142)
medium
Vulnerable dependency: cryptography@42.0.0,<44.0 (GHSA-3ww4-gg4f-jr7f)
medium
Vulnerable dependency: cryptography@42.0.0,<44.0 (GHSA-9v9h-cgj8-h64p)
medium
Vulnerable dependency: cryptography@42.0.0,<44.0 (GHSA-hggm-jpg3-v476)
medium
Vulnerable dependency: cryptography@42.0.0,<44.0 (GHSA-jwv3-5hgf-82ww)
medium
Vulnerable dependency: cryptography@42.0.0,<44.0 (GHSA-m2h6-j472-rp4c)
medium
Vulnerable dependency: cryptography@42.0.0,<44.0 (GHSA-m959-cc7f-wv43)
medium
Vulnerable dependency: cryptography@42.0.0,<44.0 (GHSA-q3cj-2r34-2cwc)
medium
Vulnerable dependency: cryptography@42.0.0,<44.0 (GHSA-r6ph-v2qm-q3c2)
medium
Vulnerable dependency: cryptography@42.0.0,<44.0 (PYSEC-2017-8)
medium
Vulnerable dependency: cryptography@42.0.0,<44.0 (PYSEC-2021-62)
medium
Vulnerable dependency: cryptography@42.0.0,<44.0 (PYSEC-2026-1283)
medium
Vulnerable dependency: cryptography@42.0.0,<44.0 (PYSEC-2026-1285)
medium
Vulnerable dependency: cryptography@42.0.0,<44.0 (PYSEC-2026-2141)
medium
Vulnerable dependency: cryptography@42.0.0,<44.0 (PYSEC-2026-35)
medium
Vulnerable dependency: cryptography@42.0.0,<44.0 (PYSEC-2026-3553)
medium
Vulnerable dependency: cryptography@42.0.0,<44.0 (PYSEC-2026-3554)
medium
Vulnerable dependency: fastapi@0.115.0,<1.0 (GHSA-8h2j-cgx8-6xv7)
medium
Vulnerable dependency: fastapi@0.115.0,<1.0 (PYSEC-2021-100)
medium
Vulnerable dependency: fastapi@0.115.0,<1.0 (PYSEC-2024-38)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-248m-82v9-q6g6)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-2q4j-m29v-hq73)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-2rw7-x74f-jg35)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-3crg-w4f6-42mx)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-4f6g-68pf-7vhv)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-4pxv-j86v-mhcw)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-4xc4-762w-m6cg)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-52x6-gq3r-vpf4)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-55h5-xmcq-c37v)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-5hgr-hg42-57jg)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-5qjq-93h5-hrgp)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-5xf7-4p34-54qr)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-7gw9-cf7v-778f)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-7hfw-26vp-jp8m)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-87mj-5ggw-8qc3)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-996q-pr4m-cvgq)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-9m86-7pmv-2852)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-9mvc-8737-8j8h)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-cj93-chg6-vgv8)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-f2v5-7jq9-h8cg)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-fp3f-mc75-235c)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-fwg2-594c-jp42)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-g867-7843-wf8q)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-g9xf-7f8q-9mcj)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-hqmh-ppp3-xvm7)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-j543-4vmf-qm7v)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-jfx9-29x2-rv3j)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-jj6c-8h6c-hppx)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-jm82-fx9c-mx94)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-m2v9-299j-rv96)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-m449-cwjh-6pw7)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-qpxp-75px-xjcp)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-vr63-x8vc-m265)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-wgvp-vg3v-2xq3)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-wjqc-6w8f-h24c)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-x284-j5p8-9c5p)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-x7hp-r3qg-r3cj)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-1827)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-1828)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-1829)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-1830)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-1831)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-1832)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-1833)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3004)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3005)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3006)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3007)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3009)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3010)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3011)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3012)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3013)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3014)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3015)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3016)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3017)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3018)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3019)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3020)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3021)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3022)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3023)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3024)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3025)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3026)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3027)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3610)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3611)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3612)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3613)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3655)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (PYSEC-2026-3656)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-55x5-fj6c-h6m8)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-57qw-cc2g-pv5p)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-jq4v-f5q6-mjqq)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-pgww-xf46-h92r)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-vfmq-68hx-4jfw)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-wrxv-2j5q-m38w)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-xp26-p53h-6h2p)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (PYSEC-2014-9)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (PYSEC-2018-12)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (PYSEC-2021-19)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (PYSEC-2021-852)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (PYSEC-2022-230)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (PYSEC-2026-87)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (GHSA-2jv5-9r88-3w3p)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (GHSA-59g5-xgcq-4qw3)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (GHSA-5rvq-cxj2-64vf)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (GHSA-6jv3-5f52-599m)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (GHSA-mj87-hwqh-73pj)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (GHSA-pp6c-gr5w-3c5g)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (GHSA-v9pg-7xvm-68hf)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (GHSA-vffw-93wf-4j4q)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (GHSA-wp53-j4wj-2cfg)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (PYSEC-2026-1850)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (PYSEC-2026-1851)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (PYSEC-2026-1852)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (PYSEC-2026-3036)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (PYSEC-2026-3037)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (PYSEC-2026-3038)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (PYSEC-2026-3039)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (PYSEC-2026-3040)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (PYSEC-2026-3041)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-2fc2-6r4j-p65h)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-5545-2q6w-2gh6)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-9fq2-x9r6-wfmf)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-cw6w-4rcx-xphc)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-f7c7-j99h-c22f)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-fpfv-jqm9-f5jm)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-frgw-fgh6-9g52)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (PYSEC-2017-1)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (PYSEC-2018-33)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (PYSEC-2018-34)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (PYSEC-2019-108)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (PYSEC-2021-856)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (PYSEC-2021-857)
medium
Vulnerable dependency: scikit-learn@1.6.1,<2.0 (GHSA-jjw5-xxj6-pcv5)
medium
Vulnerable dependency: scikit-learn@1.6.1,<2.0 (GHSA-jw8x-6495-233v)
medium
Vulnerable dependency: scikit-learn@1.6.1,<2.0 (PYSEC-2020-107)
medium
Vulnerable dependency: scikit-learn@1.6.1,<2.0 (PYSEC-2020-108)
medium
Vulnerable dependency: scikit-learn@1.6.1,<2.0 (PYSEC-2024-110)
medium
Vulnerable dependency: uvicorn@0.27.0,<1.0 (GHSA-33c7-2mpw-hg34)
medium
Vulnerable dependency: uvicorn@0.27.0,<1.0 (GHSA-f97h-2pfx-f59f)
medium
Vulnerable dependency: uvicorn@0.27.0,<1.0 (PYSEC-2020-150)
medium
Vulnerable dependency: uvicorn@0.27.0,<1.0 (PYSEC-2020-151)
medium
Vulnerable dependency: pydantic@2.5.3,<3.0 (GHSA-5jqp-qgf6-3pvh)
medium
Vulnerable dependency: pydantic@2.5.3,<3.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.5.3,<3.0 (PYSEC-2021-47)
medium
Vulnerable dependency: pydantic@2.5.3,<3.0 (PYSEC-2026-1812)
medium
Vulnerable dependency: click@8.0.0,<9.0 (PYSEC-2026-2132)
medium
Vulnerable dependency: cryptography@42.0.0,<50.0 (GHSA-3ww4-gg4f-jr7f)
medium
Vulnerable dependency: cryptography@42.0.0,<50.0 (GHSA-9v9h-cgj8-h64p)
medium
Vulnerable dependency: cryptography@42.0.0,<50.0 (GHSA-hggm-jpg3-v476)
medium
Vulnerable dependency: cryptography@42.0.0,<50.0 (GHSA-jwv3-5hgf-82ww)
medium
Vulnerable dependency: cryptography@42.0.0,<50.0 (GHSA-m2h6-j472-rp4c)
medium
Vulnerable dependency: cryptography@42.0.0,<50.0 (GHSA-m959-cc7f-wv43)
medium
Vulnerable dependency: cryptography@42.0.0,<50.0 (GHSA-q3cj-2r34-2cwc)
medium
Vulnerable dependency: cryptography@42.0.0,<50.0 (GHSA-r6ph-v2qm-q3c2)
medium
Vulnerable dependency: cryptography@42.0.0,<50.0 (PYSEC-2017-8)
medium
Vulnerable dependency: cryptography@42.0.0,<50.0 (PYSEC-2021-62)
medium
Vulnerable dependency: cryptography@42.0.0,<50.0 (PYSEC-2026-1283)
medium
Vulnerable dependency: cryptography@42.0.0,<50.0 (PYSEC-2026-1285)
medium
Vulnerable dependency: cryptography@42.0.0,<50.0 (PYSEC-2026-2141)
medium
Vulnerable dependency: cryptography@42.0.0,<50.0 (PYSEC-2026-35)
medium
Vulnerable dependency: cryptography@42.0.0,<50.0 (PYSEC-2026-3553)
medium
Vulnerable dependency: cryptography@42.0.0,<50.0 (PYSEC-2026-3554)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-2fc2-6r4j-p65h)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-5545-2q6w-2gh6)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-9fq2-x9r6-wfmf)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-cw6w-4rcx-xphc)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-f7c7-j99h-c22f)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-fpfv-jqm9-f5jm)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-frgw-fgh6-9g52)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (PYSEC-2017-1)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (PYSEC-2018-33)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (PYSEC-2018-34)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (PYSEC-2019-108)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (PYSEC-2021-856)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (PYSEC-2021-857)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-2fc2-6r4j-p65h)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-5545-2q6w-2gh6)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-9fq2-x9r6-wfmf)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-cw6w-4rcx-xphc)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-f7c7-j99h-c22f)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-fpfv-jqm9-f5jm)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-frgw-fgh6-9g52)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (PYSEC-2017-1)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (PYSEC-2018-33)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (PYSEC-2018-34)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (PYSEC-2019-108)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (PYSEC-2021-856)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (PYSEC-2021-857)
medium
Buffer.from base64 in microsoft-agent-governance-toolkit-b570558/agent-governance-python/agent-mesh/services/api/src/services/identity.ts:34
medium
Buffer.from base64 in microsoft-agent-governance-toolkit-b570558/agent-governance-python/agent-mesh/services/api/src/services/identity.ts:50
medium
Buffer.from base64 in microsoft-agent-governance-toolkit-b570558/agent-governance-python/agent-mesh/services/api/src/services/identity.ts:60
medium
Hex string literal (>50 chars) in microsoft-agent-governance-toolkit-b570558/agent-governance-python/agentmesh-integrations/mastra-agentmesh/tests/index.test.ts:188
medium
Hex string literal (>50 chars) in microsoft-agent-governance-toolkit-b570558/agent-governance-python/agentmesh-integrations/mastra-agentmesh/src/audit.ts:18
medium
High-entropy string (6.02 bits/char) in microsoft-agent-governance-toolkit-b570558/agent-governance-python/agent-os/src/agent_os/normalize.py:546
medium
Hex string literal (>50 chars) in microsoft-agent-governance-toolkit-b570558/agent-governance-golang/packages/agentmesh/audit_test.go:135
medium
Hex string literal (>50 chars) in microsoft-agent-governance-toolkit-b570558/policy-engine/sdk/node/scripts/fetch-opa.mjs:38
medium
Hex string literal (>50 chars) in microsoft-agent-governance-toolkit-b570558/policy-engine/sdk/node/scripts/fetch-opa.mjs:39
medium
Hex string literal (>50 chars) in microsoft-agent-governance-toolkit-b570558/policy-engine/sdk/node/scripts/fetch-opa.mjs:40
medium
Hex string literal (>50 chars) in microsoft-agent-governance-toolkit-b570558/policy-engine/sdk/node/scripts/fetch-opa.mjs:41
medium
Hex string literal (>50 chars) in microsoft-agent-governance-toolkit-b570558/policy-engine/sdk/node/scripts/fetch-opa.mjs:42
medium
Hex string literal (>50 chars) in microsoft-agent-governance-toolkit-b570558/scripts/ci/generate_workflows.py:37
medium
Hex string literal (>50 chars) in microsoft-agent-governance-toolkit-b570558/agent-governance-typescript/tests/encryption.test.ts:216
info
Tool: database_query
medium
Hex string literal (>50 chars) in microsoft-agent-governance-toolkit-b570558/agent-governance-typescript/tests/encryption.test.ts:220
medium
Buffer.from base64 in microsoft-agent-governance-toolkit-b570558/agent-governance-typescript/src/identity.ts:518
medium
Buffer.from base64 in microsoft-agent-governance-toolkit-b570558/agent-governance-typescript/src/identity.ts:543
medium
Buffer.from base64 in microsoft-agent-governance-toolkit-b570558/agent-governance-typescript/src/encryption/mesh-client.ts:1212
medium
Hex string literal (>50 chars) in microsoft-agent-governance-toolkit-b570558/tests/ci/test_release_tooling.py:289
medium
Hex string literal (>50 chars) in microsoft-agent-governance-toolkit-b570558/tests/ci/test_release_tooling.py:290
medium
Hex string literal (>50 chars) in microsoft-agent-governance-toolkit-b570558/tests/ci/test_release_tooling.py:321
medium
Hex string literal (>50 chars) in microsoft-agent-governance-toolkit-b570558/tests/ci/test_release_tooling.py:322
medium
Hex string literal (>50 chars) in microsoft-agent-governance-toolkit-b570558/tests/ci/test_release_tooling.py:323
medium
Hex string literal (>50 chars) in microsoft-agent-governance-toolkit-b570558/tests/ci/test_release_tooling.py:324
medium
Hex string literal (>50 chars) in microsoft-agent-governance-toolkit-b570558/tests/ci/test_release_tooling.py:330
medium
Buffer.from base64 in microsoft-agent-governance-toolkit-b570558/tests/ci/test_ai_agent_sanitize.py:63
info
Tool: filesystem_read
medium
Hex string literal (>50 chars) in microsoft-agent-governance-toolkit-b570558/examples/reasoning-attestation-governed/getting_started.py:231
info
package.json metadata
info
pyproject.toml metadata
info
Tool: check_trust
info
Tool: get_trust_score
info
Tool: establish_handshake
info
Tool: verify_delegation
info
Tool: record_interaction
info
Tool: get_identity
info
Tool: api_call
info
Tool: echo
info
Tool: read_file
info
Tool: write_file
info
Tool: query_database
info
Transport: stdio
info
Required env vars (177)
high
High-risk OAuth scope: admin
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Hardcoded Password found in microsoft-agent-governance-toolkit-b570558/agent-governance-python/agent-os/examples/self-evaluating/examples/sample_full_stack_agent.py
high
Permission: shell access detected
medium
Permission: database access detected
low
Permission: env_vars access detected
info
SBOM generated: 1157 components
critical
RSA Private Key found in microsoft-agent-governance-toolkit-b570558/agent-governance-rust/agentmesh-mcp/src/mcp/redactor.rs
critical
EC Private Key found in microsoft-agent-governance-toolkit-b570558/agent-governance-rust/agentmesh-mcp/src/mcp/redactor.rs
high
Hardcoded Password found in microsoft-agent-governance-toolkit-b570558/agent-governance-python/agent-os/modules/observability/alertmanager/alertmanager.yml
high
Hardcoded Password found in microsoft-agent-governance-toolkit-b570558/agent-governance-python/agent-os/modules/control-plane/benchmarks/red_team_dataset.py
high
Hardcoded Password found in microsoft-agent-governance-toolkit-b570558/agent-governance-python/agent-os/examples/self-evaluating/docs/UNIVERSAL_SIGNAL_BUS.md
high
Hardcoded Password found in microsoft-agent-governance-toolkit-b570558/agent-governance-python/agent-os/examples/self-evaluating/examples/example_universal_signal_bus.py
high
Authorization Bearer Token found in microsoft-agent-governance-toolkit-b570558/policy-engine/core/src/dispatchers/llm.rs
high
Generic API Key Assignment found in microsoft-agent-governance-toolkit-b570558/policy-engine/sdk/python/examples/real_packages/crewai_crew.py
high
Generic API Key Assignment found in microsoft-agent-governance-toolkit-b570558/policy-engine/sdk/python/examples/real_packages/anthropic_client.py
high
Generic API Key Assignment found in microsoft-agent-governance-toolkit-b570558/agent-governance-typescript/agent-os-vscode/src/extension.ts
high
Generic API Key Assignment found in microsoft-agent-governance-toolkit-b570558/agent-governance-typescript/agent-os-vscode/src/server/browserPolicyEditor.ts
high
Generic API Key Assignment found in microsoft-agent-governance-toolkit-b570558/agent-governance-typescript/agent-os-vscode/src/webviews/policyEditor/PolicyEditorPanel.ts
high
Generic API Key Assignment found in microsoft-agent-governance-toolkit-b570558/docs/security/scanning.md
critical
GitHub Personal Access Token found in microsoft-agent-governance-toolkit-b570558/examples/opencode-agt/scenarios/guarded-session/README.md
low
Tool 'write_file' has no annotations
low
Tool 'query_database' has no annotations
high
Hardcoded API key in microsoft-agent-governance-toolkit-b570558/agent-governance-python/agent-os/tests/test_security_skills.py
info
Sandbox failed to start for behavioral verification
low
Tool 'check_trust' has no annotations
low
Tool 'get_trust_score' has no annotations
low
Tool 'establish_handshake' has no annotations
low
Tool 'verify_delegation' has no annotations
low
Tool 'record_interaction' has no annotations
low
Tool 'get_identity' has no annotations
low
Tool 'filesystem_read' has no annotations
low
Tool 'database_query' has no annotations
low
Tool 'api_call' has no annotations
low
Tool 'echo' has no annotations
low
Tool 'read_file' has no annotations
medium
Excessive dependency count: 300 direct dependencies
medium
Suspicious package name: react-dom
medium
Vulnerable dependency: cryptography@46.0.7 (GHSA-537c-gmf6-5ccf)
medium
Vulnerable dependency: cryptography@46.0.7 (GHSA-g6cj-pr64-35w5)
medium
Vulnerable dependency: cryptography@46.0.7 (GHSA-jwv3-5hgf-82ww)
medium
Vulnerable dependency: cryptography@46.0.7 (GHSA-m2h6-j472-rp4c)
medium
Vulnerable dependency: cryptography@46.0.7 (PYSEC-2026-3552)
medium
Vulnerable dependency: cryptography@46.0.7 (PYSEC-2026-3553)
medium
Vulnerable dependency: cryptography@46.0.7 (PYSEC-2026-3554)
medium
Vulnerable dependency: pypdf@6.14.2 (GHSA-fp3f-mc75-235c)
medium
Vulnerable dependency: pypdf@6.14.2 (GHSA-fwg2-594c-jp42)
medium
Vulnerable dependency: pypdf@6.14.2 (PYSEC-2026-3655)
medium
Vulnerable dependency: pypdf@6.14.2 (PYSEC-2026-3656)
medium
Vulnerable dependency: pypdf@6.10.2 (GHSA-248m-82v9-q6g6)
medium
Vulnerable dependency: pypdf@6.10.2 (GHSA-52x6-gq3r-vpf4)
medium
Vulnerable dependency: pypdf@6.10.2 (GHSA-55h5-xmcq-c37v)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-cw6w-4rcx-xphc)
info
pyproject.toml metadata
info
Tool: read_file
info
Tool: write_file
info
Tool: query_database
info
Tool: filesystem_read
info
Tool: database_query
info
Tool: api_call
info
Tool: check_trust
info
Tool: get_trust_score
info
Tool: establish_handshake
info
Tool: verify_delegation
info
Tool: record_interaction
info
Tool: get_identity
info
Transport: stdio
info
Required env vars (158)
low
Tool 'read_file' has no annotations
low
Tool 'write_file' has no annotations
low
Tool 'query_database' has no annotations
low
Tool 'filesystem_read' has no annotations
low
Tool 'database_query' has no annotations
low
Tool 'api_call' has no annotations
low
Tool 'check_trust' has no annotations
low
Tool 'get_trust_score' has no annotations
low
Tool 'establish_handshake' has no annotations
low
Tool 'verify_delegation' has no annotations
low
Tool 'record_interaction' has no annotations
low
Tool 'get_identity' has no annotations
high
Hardcoded API key in agent-governance-python/agent-os/tests/test_security_skills.py
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
medium
Permission: database access detected
low
Permission: env_vars access detected
medium
Excessive dependency count: 324 direct dependencies
medium
Suspicious package name: react-dom
medium
Vulnerable dependency: zod@3.22.0 (GHSA-m95q-7qp3-xv42)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh)
medium
Vulnerable dependency: pytest@7.4.0 (GHSA-6w46-j5rx-g56g)
medium
Vulnerable dependency: pynacl@1.5.0 (GHSA-mrfv-m5wm-5w6w)
medium
Vulnerable dependency: python-multipart@0.0.26 (GHSA-pp6c-gr5w-3c5g)
medium
Vulnerable dependency: langchain-core@1.2.28 (GHSA-pjwx-r37v-7724)
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15.0 (GHSA-3wxx-q3gv-pvvv)
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15.0 (GHSA-488g-hw5f-x29p)
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15.0 (GHSA-7753-xrfw-ch36)
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15.0 (GHSA-cr7q-2w66-hjcm)
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15.0 (GHSA-fxc2-8m62-m85x)
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15.0 (GHSA-j3wr-m6xh-64hg)
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15.0 (GHSA-r6gp-rff2-p3hf)
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15.0 (GHSA-wvpx-g427-q9wc)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (GHSA-3ww4-gg4f-jr7f)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (GHSA-9v9h-cgj8-h64p)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (GHSA-hggm-jpg3-v476)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (GHSA-m959-cc7f-wv43)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (GHSA-q3cj-2r34-2cwc)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (GHSA-r6ph-v2qm-q3c2)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (PYSEC-2017-8)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (PYSEC-2021-62)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (PYSEC-2026-35)
medium
Vulnerable dependency: pyyaml@6.0,<7.0 (GHSA-8q59-q68h-6hv4)
medium
Vulnerable dependency: pyyaml@6.0,<7.0 (GHSA-rprw-h62v-c2w7)
medium
Vulnerable dependency: pyyaml@6.0,<7.0 (PYSEC-2018-49)
medium
Vulnerable dependency: pyyaml@6.0,<7.0 (PYSEC-2021-142)
medium
Vulnerable dependency: httpx@0.27.0,<1.0 (GHSA-h8pj-cxx2-jfg2)
medium
Vulnerable dependency: httpx@0.27.0,<1.0 (PYSEC-2022-183)
medium
Vulnerable dependency: pydantic@2.4.0,<3.0 (GHSA-5jqp-qgf6-3pvh)
medium
Vulnerable dependency: pydantic@2.4.0,<3.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.4.0,<3.0 (PYSEC-2021-47)
medium
Vulnerable dependency: pydantic@2.5.0,<3.0 (GHSA-5jqp-qgf6-3pvh)
medium
Vulnerable dependency: pydantic@2.5.0,<3.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.5.0,<3.0 (PYSEC-2021-47)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-2fc2-6r4j-p65h)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-5545-2q6w-2gh6)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-9fq2-x9r6-wfmf)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-cw6w-4rcx-xphc)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-f7c7-j99h-c22f)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-fpfv-jqm9-f5jm)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-frgw-fgh6-9g52)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (PYSEC-2017-1)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (PYSEC-2018-33)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (PYSEC-2018-34)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (PYSEC-2019-108)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (PYSEC-2021-856)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (PYSEC-2021-857)
medium
Vulnerable dependency: fastapi@0.115.0,<1.0 (GHSA-8h2j-cgx8-6xv7)
medium
Vulnerable dependency: fastapi@0.115.0,<1.0 (PYSEC-2021-100)
medium
Vulnerable dependency: fastapi@0.115.0,<1.0 (PYSEC-2024-38)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-2q4j-m29v-hq73)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-2rw7-x74f-jg35)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-3crg-w4f6-42mx)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-4f6g-68pf-7vhv)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-4pxv-j86v-mhcw)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-4xc4-762w-m6cg)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-7gw9-cf7v-778f)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-7hfw-26vp-jp8m)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-87mj-5ggw-8qc3)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-996q-pr4m-cvgq)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-9m86-7pmv-2852)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-9mvc-8737-8j8h)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-f2v5-7jq9-h8cg)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-hqmh-ppp3-xvm7)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-jfx9-29x2-rv3j)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-jj6c-8h6c-hppx)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-m449-cwjh-6pw7)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-qpxp-75px-xjcp)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-vr63-x8vc-m265)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-wgvp-vg3v-2xq3)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-x284-j5p8-9c5p)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-x7hp-r3qg-r3cj)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-55x5-fj6c-h6m8)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-57qw-cc2g-pv5p)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-jq4v-f5q6-mjqq)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-pgww-xf46-h92r)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-vfmq-68hx-4jfw)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-wrxv-2j5q-m38w)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-xp26-p53h-6h2p)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (PYSEC-2014-9)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (PYSEC-2018-12)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (PYSEC-2021-19)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (PYSEC-2021-852)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (PYSEC-2022-230)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (PYSEC-2026-87)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (GHSA-2jv5-9r88-3w3p)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (GHSA-59g5-xgcq-4qw3)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (GHSA-mj87-hwqh-73pj)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (GHSA-pp6c-gr5w-3c5g)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (GHSA-wp53-j4wj-2cfg)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-2fc2-6r4j-p65h)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-5545-2q6w-2gh6)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-9fq2-x9r6-wfmf)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-f7c7-j99h-c22f)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-fpfv-jqm9-f5jm)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-frgw-fgh6-9g52)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (PYSEC-2017-1)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (PYSEC-2018-33)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (PYSEC-2018-34)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (PYSEC-2019-108)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (PYSEC-2021-856)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (PYSEC-2021-857)
medium
Vulnerable dependency: scikit-learn@1.6.1,<2.0 (GHSA-jjw5-xxj6-pcv5)
medium
Vulnerable dependency: scikit-learn@1.6.1,<2.0 (GHSA-jw8x-6495-233v)
medium
Vulnerable dependency: scikit-learn@1.6.1,<2.0 (PYSEC-2020-107)
medium
Vulnerable dependency: scikit-learn@1.6.1,<2.0 (PYSEC-2020-108)
medium
Vulnerable dependency: scikit-learn@1.6.1,<2.0 (PYSEC-2024-110)
medium
Vulnerable dependency: pyyaml@6.0.0,<7.0 (GHSA-8q59-q68h-6hv4)
medium
Vulnerable dependency: pyyaml@6.0.0,<7.0 (GHSA-rprw-h62v-c2w7)
medium
Vulnerable dependency: pyyaml@6.0.0,<7.0 (PYSEC-2018-49)
medium
Vulnerable dependency: pyyaml@6.0.0,<7.0 (PYSEC-2021-142)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-2vrm-gr82-f7m5)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-3wq7-rqq7-wx6j)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-45c4-8wx5-qw6w)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-54jq-c3m8-4m76)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-5m98-qgg9-wh84)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-63hf-3vf5-4wqf)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-69f9-5gxw-wvc2)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-6jhg-hg63-jvvf)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-6mq8-rvhq-8wgg)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-7gpw-8wmc-pm8g)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-8495-4g3g-x7pr)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-8qpw-xqxj-h4r2)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-9548-qrrj-x5pj)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-966j-vmvw-g2g9)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-c427-h43c-vf67)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-fh55-r93g-j68g)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-g84x-mcqj-x9qq)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-gfw2-4jvh-wgfg)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-hcc4-c3v8-rx92)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-jj3x-wxrx-4x23)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-m5qp-6w8w-w647)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-mqqc-3gqh-h2x8)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-mwh4-6h8g-pg8w)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-p998-jp59-783m)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-pjjw-qhg8-p2p9)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-q3qx-c6g2-7pw2)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-qvrw-v9rv-5rjx)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-v6wp-4m6f-gcjg)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-w2fm-2cpv-w7v5)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-xx9p-xxvh-7g8j)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2021-76)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2023-120)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2023-246)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2023-247)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2023-250)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2023-251)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2024-26)
medium
Vulnerable dependency: mcp@1.0.0,<2.0 (GHSA-3qhf-m339-9g5v)
medium
Vulnerable dependency: mcp@1.0.0,<2.0 (GHSA-9h52-p55h-vw2f)
medium
Vulnerable dependency: mcp@1.0.0,<2.0 (GHSA-j975-95f5-7wqh)
medium
Vulnerable dependency: pydantic@2.4.0,<3.0.0 (GHSA-5jqp-qgf6-3pvh)
medium
Vulnerable dependency: pydantic@2.4.0,<3.0.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.4.0,<3.0.0 (PYSEC-2021-47)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-2fc2-6r4j-p65h)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-5545-2q6w-2gh6)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-9fq2-x9r6-wfmf)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-cw6w-4rcx-xphc)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-f7c7-j99h-c22f)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-fpfv-jqm9-f5jm)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-frgw-fgh6-9g52)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (PYSEC-2017-1)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (PYSEC-2018-33)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (PYSEC-2018-34)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (PYSEC-2019-108)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (PYSEC-2021-856)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (PYSEC-2021-857)
medium
Vulnerable dependency: uvicorn@0.27.0,<1.0 (GHSA-33c7-2mpw-hg34)
medium
Vulnerable dependency: uvicorn@0.27.0,<1.0 (GHSA-f97h-2pfx-f59f)
medium
Vulnerable dependency: uvicorn@0.27.0,<1.0 (PYSEC-2020-150)
medium
Vulnerable dependency: uvicorn@0.27.0,<1.0 (PYSEC-2020-151)
medium
Vulnerable dependency: pydantic@2.5.3,<3.0 (GHSA-5jqp-qgf6-3pvh)
medium
Vulnerable dependency: pydantic@2.5.3,<3.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.5.3,<3.0 (PYSEC-2021-47)
medium
Vulnerable dependency: cryptography@46.0.7,<49.0 (GHSA-3ww4-gg4f-jr7f)
medium
Vulnerable dependency: cryptography@46.0.7,<49.0 (GHSA-9v9h-cgj8-h64p)
medium
Vulnerable dependency: cryptography@46.0.7,<49.0 (GHSA-hggm-jpg3-v476)
medium
Vulnerable dependency: cryptography@46.0.7,<49.0 (GHSA-m959-cc7f-wv43)
medium
Vulnerable dependency: cryptography@46.0.7,<49.0 (GHSA-q3cj-2r34-2cwc)
medium
Vulnerable dependency: cryptography@46.0.7,<49.0 (GHSA-r6ph-v2qm-q3c2)
medium
Vulnerable dependency: cryptography@46.0.7,<49.0 (PYSEC-2017-8)
medium
Vulnerable dependency: cryptography@46.0.7,<49.0 (PYSEC-2021-62)
medium
Vulnerable dependency: cryptography@46.0.7,<49.0 (PYSEC-2026-35)
medium
Vulnerable dependency: pynacl@1.5.0,<2.0 (GHSA-mrfv-m5wm-5w6w)
medium
Vulnerable dependency: pydantic@2.0,<3.0 (GHSA-5jqp-qgf6-3pvh)
medium
Vulnerable dependency: pydantic@2.0,<3.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.0,<3.0 (PYSEC-2021-47)
high
Generic API Key Assignment found in docs/security/scanning.md
high
Hardcoded Password found in examples/quickstart/autogen_governed.py
high
Generic API Key Assignment found in agent-governance-typescript/agent-os-vscode/src/extension.ts
high
Generic API Key Assignment found in agent-governance-typescript/agent-os-vscode/src/server/browserPolicyEditor.ts
high
Generic API Key Assignment found in agent-governance-typescript/agent-os-vscode/src/webviews/policyEditor/PolicyEditorPanel.ts
high
Hardcoded Password found in agent-governance-python/agent-os/docs/use-cases.md
high
Hardcoded Password found in agent-governance-python/agent-os/examples/self-evaluating/docs/UNIVERSAL_SIGNAL_BUS.md
high
Hardcoded Password found in agent-governance-python/agent-os/examples/self-evaluating/examples/sample_full_stack_agent.py
high
Hardcoded Password found in agent-governance-python/agent-os/examples/self-evaluating/examples/example_universal_signal_bus.py
high
Hardcoded Password found in agent-governance-python/agent-os/modules/observability/alertmanager/alertmanager.yml
high
Hardcoded Password found in agent-governance-python/agent-os/modules/scak/build_and_publish.ps1
high
Hardcoded Password found in agent-governance-python/agent-os/modules/control-plane/benchmark/red_team_dataset.py
medium
Hex string literal (>50 chars) in agent-governance-golang/packages/agentmesh/audit_test.go:135
medium
Hex string literal (>50 chars) in examples/reasoning-attestation-governed/getting_started.py:231
medium
Buffer.from base64 in agent-governance-typescript/src/identity.ts:518
medium
Buffer.from base64 in agent-governance-typescript/src/identity.ts:543
medium
Buffer.from base64 in agent-governance-typescript/src/encryption/mesh-client.ts:991
medium
Hex string literal (>50 chars) in agent-governance-python/agentmesh-integrations/mastra-agentmesh/src/audit.ts:13
medium
Hex string literal (>50 chars) in agent-governance-python/agentmesh-integrations/mastra-agentmesh/src/audit.ts:135
high
Long unicode escape chain in agent-governance-python/agent-os/examples/trading-governance/demo.py:781
high
Long unicode escape chain in agent-governance-python/agent-os/examples/trading-governance/demo.py:783
high
Long unicode escape chain in agent-governance-python/agent-os/examples/trading-governance/demo.py:788
medium
Buffer.from base64 in agent-governance-python/agent-mesh/services/api/src/services/identity.ts:34
medium
Buffer.from base64 in agent-governance-python/agent-mesh/services/api/src/services/identity.ts:50
medium
Buffer.from base64 in agent-governance-python/agent-mesh/services/api/src/services/identity.ts:60
info
SLSA Build Level 3 detected
high
High-risk OAuth scope: admin
info
Could not connect to MCP server for output poisoning scan
info
Could not connect to MCP server for behavioral verification
info
SBOM generated: 579 components
info
MITRE ATLAS technique coverage summary
info
ATLAS: Adversarial ML Supply Chain (AML.T0043)
info
ATLAS: Poison Training Data (AML.T0020)
info
package.json metadata
info
pyproject.toml metadata
info
Tool: read_file
info
Tool: write_file
info
Tool: query_database
info
Tool: filesystem_read
info
Tool: database_query
info
Tool: api_call
info
Tool: check_trust
info
Tool: get_trust_score
info
Tool: establish_handshake
info
Tool: verify_delegation
info
Tool: record_interaction
info
Tool: get_identity
info
Transport: stdio
info
Required env vars (153)
low
Tool 'read_file' has no annotations
low
Tool 'write_file' has no annotations
low
Tool 'query_database' has no annotations
low
Tool 'filesystem_read' has no annotations
low
Tool 'database_query' has no annotations
low
Tool 'api_call' has no annotations
low
Tool 'check_trust' has no annotations
low
Tool 'get_trust_score' has no annotations
low
Tool 'establish_handshake' has no annotations
low
Tool 'verify_delegation' has no annotations
low
Tool 'record_interaction' has no annotations
low
Tool 'get_identity' has no annotations
high
Hardcoded API key in agent-governance-python/agent-os/tests/test_security_skills.py
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
medium
Permission: database access detected
low
Permission: env_vars access detected
medium
Excessive dependency count: 326 direct dependencies
medium
Suspicious package name: react-dom
medium
Vulnerable dependency: zod@3.22.0 (GHSA-m95q-7qp3-xv42)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh)
medium
Vulnerable dependency: pynacl@1.5.0 (GHSA-mrfv-m5wm-5w6w)
medium
Vulnerable dependency: pytest@7.4.0 (GHSA-6w46-j5rx-g56g)
medium
Vulnerable dependency: python-multipart@0.0.26 (GHSA-pp6c-gr5w-3c5g)
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15.0 (GHSA-3wxx-q3gv-pvvv)
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15.0 (GHSA-488g-hw5f-x29p)
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15.0 (GHSA-7753-xrfw-ch36)
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15.0 (GHSA-cr7q-2w66-hjcm)
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15.0 (GHSA-fxc2-8m62-m85x)
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15.0 (GHSA-j3wr-m6xh-64hg)
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15.0 (GHSA-r6gp-rff2-p3hf)
medium
Vulnerable dependency: llama-index-core@0.13.0,<0.15.0 (GHSA-wvpx-g427-q9wc)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (GHSA-3ww4-gg4f-jr7f)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (GHSA-9v9h-cgj8-h64p)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (PYSEC-2021-62)
medium
Vulnerable dependency: pyyaml@6.0,<7.0 (GHSA-rprw-h62v-c2w7)
medium
Vulnerable dependency: pyyaml@6.0,<7.0 (PYSEC-2018-49)
medium
Vulnerable dependency: pyyaml@6.0,<7.0 (GHSA-8q59-q68h-6hv4)
medium
Vulnerable dependency: httpx@0.27.0,<1.0 (PYSEC-2022-183)
medium
Vulnerable dependency: langchain-core@1.2.28 (GHSA-pjwx-r37v-7724)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (GHSA-q3cj-2r34-2cwc)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (GHSA-r6ph-v2qm-q3c2)
medium
Vulnerable dependency: pydantic@2.4.0,<3.0 (PYSEC-2021-47)
medium
Vulnerable dependency: pydantic@2.4.0,<3.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-5545-2q6w-2gh6)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-f7c7-j99h-c22f)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (PYSEC-2018-34)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-cw6w-4rcx-xphc)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (PYSEC-2017-1)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (PYSEC-2021-857)
medium
Vulnerable dependency: fastapi@0.115.0,<1.0 (PYSEC-2021-100)
medium
Vulnerable dependency: fastapi@0.115.0,<1.0 (PYSEC-2024-38)
medium
Vulnerable dependency: pydantic@2.5.0,<3.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-2q4j-m29v-hq73)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-2rw7-x74f-jg35)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-3crg-w4f6-42mx)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-4f6g-68pf-7vhv)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-4pxv-j86v-mhcw)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-4xc4-762w-m6cg)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-7gw9-cf7v-778f)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-7hfw-26vp-jp8m)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-87mj-5ggw-8qc3)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-996q-pr4m-cvgq)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-9m86-7pmv-2852)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-9mvc-8737-8j8h)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-f2v5-7jq9-h8cg)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-hqmh-ppp3-xvm7)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-jfx9-29x2-rv3j)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-jj6c-8h6c-hppx)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-m449-cwjh-6pw7)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-qpxp-75px-xjcp)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-vr63-x8vc-m265)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-wgvp-vg3v-2xq3)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-x284-j5p8-9c5p)
medium
Vulnerable dependency: pypdf@6.10.2,<7.0 (GHSA-x7hp-r3qg-r3cj)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-55x5-fj6c-h6m8)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-57qw-cc2g-pv5p)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-jq4v-f5q6-mjqq)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-pgww-xf46-h92r)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-vfmq-68hx-4jfw)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-wrxv-2j5q-m38w)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (GHSA-xp26-p53h-6h2p)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (PYSEC-2014-9)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (PYSEC-2018-12)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (PYSEC-2021-19)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (PYSEC-2021-852)
medium
Vulnerable dependency: lxml@4.9.3,<7.0 (PYSEC-2022-230)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (GHSA-2jv5-9r88-3w3p)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (GHSA-59g5-xgcq-4qw3)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (GHSA-mj87-hwqh-73pj)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (GHSA-pp6c-gr5w-3c5g)
medium
Vulnerable dependency: python-multipart@0.0.22,<1.0 (GHSA-wp53-j4wj-2cfg)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-2fc2-6r4j-p65h)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-5545-2q6w-2gh6)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-9fq2-x9r6-wfmf)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-cw6w-4rcx-xphc)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-f7c7-j99h-c22f)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-fpfv-jqm9-f5jm)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (GHSA-frgw-fgh6-9g52)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (PYSEC-2017-1)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (PYSEC-2018-33)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (PYSEC-2018-34)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (PYSEC-2019-108)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (PYSEC-2021-856)
medium
Vulnerable dependency: numpy@1.26.2,<2.0 (PYSEC-2021-857)
medium
Vulnerable dependency: scikit-learn@1.6.1,<2.0 (GHSA-jjw5-xxj6-pcv5)
medium
Vulnerable dependency: scikit-learn@1.6.1,<2.0 (GHSA-jw8x-6495-233v)
medium
Vulnerable dependency: scikit-learn@1.6.1,<2.0 (PYSEC-2020-107)
medium
Vulnerable dependency: scikit-learn@1.6.1,<2.0 (PYSEC-2020-108)
medium
Vulnerable dependency: scikit-learn@1.6.1,<2.0 (PYSEC-2024-110)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-2fc2-6r4j-p65h)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-9fq2-x9r6-wfmf)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-fpfv-jqm9-f5jm)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (GHSA-frgw-fgh6-9g52)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (PYSEC-2018-33)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (PYSEC-2019-108)
medium
Vulnerable dependency: numpy@1.20.0,<2.0 (PYSEC-2021-856)
medium
Vulnerable dependency: pydantic@2.4.0,<3.0 (GHSA-5jqp-qgf6-3pvh)
medium
Vulnerable dependency: pyyaml@6.0.0,<7.0 (GHSA-8q59-q68h-6hv4)
medium
Vulnerable dependency: pyyaml@6.0.0,<7.0 (GHSA-rprw-h62v-c2w7)
medium
Vulnerable dependency: pyyaml@6.0.0,<7.0 (PYSEC-2018-49)
medium
Vulnerable dependency: pyyaml@6.0.0,<7.0 (PYSEC-2021-142)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-3wq7-rqq7-wx6j)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-45c4-8wx5-qw6w)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-54jq-c3m8-4m76)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-5m98-qgg9-wh84)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-69f9-5gxw-wvc2)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-6jhg-hg63-jvvf)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-6mq8-rvhq-8wgg)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-7gpw-8wmc-pm8g)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-8495-4g3g-x7pr)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-966j-vmvw-g2g9)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-c427-h43c-vf67)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-fh55-r93g-j68g)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-g84x-mcqj-x9qq)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-hcc4-c3v8-rx92)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-mqqc-3gqh-h2x8)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-mwh4-6h8g-pg8w)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-pjjw-qhg8-p2p9)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-q3qx-c6g2-7pw2)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-xx9p-xxvh-7g8j)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2021-76)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2023-120)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2023-251)
medium
Vulnerable dependency: mcp@1.0.0,<2.0 (GHSA-3qhf-m339-9g5v)
medium
Vulnerable dependency: pydantic@2.4.0,<3.0.0 (GHSA-5jqp-qgf6-3pvh)
medium
Vulnerable dependency: pydantic@2.4.0,<3.0.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.4.0,<3.0.0 (PYSEC-2021-47)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-2fc2-6r4j-p65h)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-5545-2q6w-2gh6)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-9fq2-x9r6-wfmf)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-cw6w-4rcx-xphc)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-f7c7-j99h-c22f)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-fpfv-jqm9-f5jm)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (GHSA-frgw-fgh6-9g52)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (PYSEC-2017-1)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (PYSEC-2018-33)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (PYSEC-2018-34)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (PYSEC-2019-108)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (PYSEC-2021-856)
medium
Vulnerable dependency: numpy@1.24.0,<2.0 (PYSEC-2021-857)
medium
Vulnerable dependency: fastapi@0.115.0,<1.0 (GHSA-8h2j-cgx8-6xv7)
medium
Vulnerable dependency: uvicorn@0.27.0,<1.0 (GHSA-33c7-2mpw-hg34)
medium
Vulnerable dependency: uvicorn@0.27.0,<1.0 (GHSA-f97h-2pfx-f59f)
medium
Vulnerable dependency: uvicorn@0.27.0,<1.0 (PYSEC-2020-150)
medium
Vulnerable dependency: uvicorn@0.27.0,<1.0 (PYSEC-2020-151)
medium
Vulnerable dependency: pydantic@2.5.3,<3.0 (GHSA-5jqp-qgf6-3pvh)
medium
Vulnerable dependency: pydantic@2.5.3,<3.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.5.3,<3.0 (PYSEC-2021-47)
medium
Vulnerable dependency: cryptography@46.0.7,<49.0 (GHSA-3ww4-gg4f-jr7f)
medium
Vulnerable dependency: cryptography@46.0.7,<49.0 (GHSA-9v9h-cgj8-h64p)
medium
Vulnerable dependency: cryptography@46.0.7,<49.0 (GHSA-hggm-jpg3-v476)
medium
Vulnerable dependency: cryptography@46.0.7,<49.0 (GHSA-m959-cc7f-wv43)
medium
Vulnerable dependency: cryptography@46.0.7,<49.0 (GHSA-q3cj-2r34-2cwc)
medium
Vulnerable dependency: cryptography@46.0.7,<49.0 (PYSEC-2017-8)
medium
Vulnerable dependency: pynacl@1.5.0,<2.0 (GHSA-mrfv-m5wm-5w6w)
medium
Vulnerable dependency: httpx@0.27.0,<1.0 (GHSA-h8pj-cxx2-jfg2)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-2vrm-gr82-f7m5)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-63hf-3vf5-4wqf)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-8qpw-xqxj-h4r2)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-9548-qrrj-x5pj)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-gfw2-4jvh-wgfg)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-jj3x-wxrx-4x23)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-m5qp-6w8w-w647)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-p998-jp59-783m)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-qvrw-v9rv-5rjx)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-v6wp-4m6f-gcjg)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (GHSA-w2fm-2cpv-w7v5)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2023-246)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2023-247)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2023-250)
medium
Vulnerable dependency: aiohttp@3.13.4,<4.0 (PYSEC-2024-26)
medium
Vulnerable dependency: pyyaml@6.0,<7.0 (PYSEC-2021-142)
medium
Vulnerable dependency: mcp@1.0.0,<2.0 (GHSA-9h52-p55h-vw2f)
medium
Vulnerable dependency: mcp@1.0.0,<2.0 (GHSA-j975-95f5-7wqh)
medium
Vulnerable dependency: pydantic@2.5.0,<3.0 (GHSA-5jqp-qgf6-3pvh)
medium
Vulnerable dependency: pydantic@2.5.0,<3.0 (PYSEC-2021-47)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (GHSA-hggm-jpg3-v476)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (GHSA-m959-cc7f-wv43)
medium
Vulnerable dependency: cryptography@46.0.7,<47.0 (PYSEC-2017-8)
medium
Vulnerable dependency: pydantic@2.0,<3.0 (GHSA-5jqp-qgf6-3pvh)
medium
Vulnerable dependency: pydantic@2.0,<3.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.0,<3.0 (PYSEC-2021-47)
medium
Vulnerable dependency: cryptography@46.0.7,<49.0 (GHSA-r6ph-v2qm-q3c2)
medium
Vulnerable dependency: cryptography@46.0.7,<49.0 (PYSEC-2021-62)
high
Generic API Key Assignment found in docs/security-scanning.md
high
Generic API Key Assignment found in docs/security/scanning.md
high
Hardcoded Password found in examples/quickstart/autogen_governed.py
high
Generic API Key Assignment found in agent-governance-typescript/agent-os-vscode/src/extension.ts
high
Generic API Key Assignment found in agent-governance-typescript/agent-os-vscode/src/server/browserPolicyEditor.ts
high
Generic API Key Assignment found in agent-governance-typescript/agent-os-vscode/src/webviews/policyEditor/PolicyEditorPanel.ts
high
Hardcoded Password found in agent-governance-python/agent-os/docs/use-cases.md
high
Hardcoded Password found in agent-governance-python/agent-os/examples/self-evaluating/docs/UNIVERSAL_SIGNAL_BUS.md
high
Hardcoded Password found in agent-governance-python/agent-os/examples/self-evaluating/examples/sample_full_stack_agent.py
high
Hardcoded Password found in agent-governance-python/agent-os/examples/self-evaluating/examples/example_universal_signal_bus.py
high
Hardcoded Password found in agent-governance-python/agent-os/modules/observability/alertmanager/alertmanager.yml
high
Hardcoded Password found in agent-governance-python/agent-os/modules/scak/build_and_publish.ps1
high
Hardcoded Password found in agent-governance-python/agent-os/modules/control-plane/benchmark/red_team_dataset.py
medium
Hex string literal (>50 chars) in agent-governance-golang/packages/agentmesh/audit_test.go:135
medium
Hex string literal (>50 chars) in examples/reasoning-attestation-governed/getting_started.py:231
medium
Buffer.from base64 in agent-governance-typescript/src/identity.ts:518
medium
Buffer.from base64 in agent-governance-typescript/src/identity.ts:543
medium
Buffer.from base64 in agent-governance-typescript/src/encryption/mesh-client.ts:991
medium
Hex string literal (>50 chars) in agent-governance-python/agentmesh-integrations/mastra-agentmesh/src/audit.ts:13
medium
Hex string literal (>50 chars) in agent-governance-python/agentmesh-integrations/mastra-agentmesh/src/audit.ts:135
high
Long unicode escape chain in agent-governance-python/agent-os/examples/trading-governance/demo.py:781
high
Long unicode escape chain in agent-governance-python/agent-os/examples/trading-governance/demo.py:783
high
Long unicode escape chain in agent-governance-python/agent-os/examples/trading-governance/demo.py:788
medium
Buffer.from base64 in agent-governance-python/agent-mesh/services/api/src/services/identity.ts:34
medium
Buffer.from base64 in agent-governance-python/agent-mesh/services/api/src/services/identity.ts:50
medium
Buffer.from base64 in agent-governance-python/agent-mesh/services/api/src/services/identity.ts:60
info
SLSA Build Level 3 detected
high
High-risk OAuth scope: admin
info
Could not connect to MCP server for output poisoning scan
info
Could not connect to MCP server for behavioral verification
info
SBOM generated: 571 components
info
MITRE ATLAS technique coverage summary
info
ATLAS: Adversarial ML Supply Chain (AML.T0043)
info
package.json metadata
info
ATLAS: Poison Training Data (AML.T0020)