Back to search
? Not scanned yet

Zipstack/unstract

Author zipstack
Stars 7,430
License AGPL-3.0
Scanned 4d ago

LLM-Driven Extraction of Unstructured Data — Built for API Deployments & ETL Pipeline Workflows

GitHub

Tools 0

No tools indexed yet.

Permissions 5

network Server uses network capabilities via: aiohttp, fetch(), http, httpx, requests, socket, urllib
medium
filesystem Server uses filesystem capabilities via: fs sync ops, glob, open(), os, pathlib, shutil, tempfile
low
shell Server uses shell capabilities via: child_process, spawnSync(), subprocess
high
database Server uses database capabilities via: redis
medium
env_vars Server uses env_vars capabilities via: os.environ, os.getenv(), process.env
low

Scan Findings 194

medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 203 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: moment-timezone dependency_analyzer · 60%
medium
Suspicious package name: react-dnd dependency_analyzer · 60%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-markdown dependency_analyzer · 60%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-3pq3-5fj3-cg6v) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-42h9-826w-cgv3) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-44g4-m2mj-wpvx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-4hqw-qxg8-jxx2) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-542g-h47m-68v8) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-7q8q-rj6j-mhjq) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-9fr6-4gfg-395g) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-f4gw-2p7v-4548) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-gcfj-64vw-6mp9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-hcpx-6fm6-wx23) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-j8rh-479h-cp32) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-jqh4-m9w3-8hp9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-m8m8-qj5v-23w3) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-mghh-pgcx-3jjj) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-mmx7-hfxf-jppx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-mwf2-3pr3-8698) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-pmv8-rq9r-6j72) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-vh66-26gq-q6x8) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-x97p-jq2g-jp4f) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-xj6q-8x83-jv6g) dependency_analyzer · 95%
medium
Vulnerable dependency: handlebars@4.7.9 (GHSA-8r5x-fm3f-whwj) dependency_analyzer · 95%
medium
Vulnerable dependency: handlebars@4.7.9 (GHSA-p8wg-vrv2-v86f) dependency_analyzer · 95%
medium
Vulnerable dependency: handlebars@4.7.9 (GHSA-xw65-4hp5-5hc7) dependency_analyzer · 95%
medium
Vulnerable dependency: json-2-csv@5.5.1 (GHSA-g27c-q7cp-mhx6) dependency_analyzer · 95%
medium
Vulnerable dependency: moment@2.29.4 (GHSA-4p3w-j4w9-5jqw) dependency_analyzer · 95%
medium
Vulnerable dependency: pdfjs-dist@3.4.120 (GHSA-wgrm-67xf-hhpq) dependency_analyzer · 95%
medium
Vulnerable dependency: prismjs@1.29.0 (GHSA-x7hr-w5r2-h6wg) dependency_analyzer · 95%
medium
Vulnerable dependency: uuid@9.0.1 (GHSA-w5hq-g745-h8pq) dependency_analyzer · 95%
medium
Vulnerable dependency: baseline-browser-mapping@2.9.19 (GHSA-w5vr-8v7q-w6rv) dependency_analyzer · 95%
medium
Vulnerable dependency: happy-dom@20.10.2 (GHSA-5fpq-26gf-qwcr) dependency_analyzer · 95%
medium
Vulnerable dependency: happy-dom@20.10.2 (GHSA-834v-8h66-3h79) dependency_analyzer · 95%
medium
Vulnerable dependency: happy-dom@20.10.2 (GHSA-c8p4-j97h-3vg8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.5 (GHSA-587h-7wmj-h5pm) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.5 (GHSA-698v-4r3x-3vcv) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.5 (GHSA-9jrq-w75r-8gcw) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.5 (GHSA-r825-w8mm-5pxw) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.5 (GHSA-rq7h-c2jc-7f22) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.2.6 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@48.0.1 (GHSA-g6cj-pr64-35w5) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@48.0.1 (GHSA-jwv3-5hgf-82ww) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@48.0.1 (GHSA-m2h6-j472-rp4c) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@48.0.1 (PYSEC-2026-3552) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@48.0.1 (PYSEC-2026-3553) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@48.0.1 (PYSEC-2026-3554) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.33.0,<3.0.0 (GHSA-652x-xj99-gmcc) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.33.0,<3.0.0 (GHSA-9hjg-9r4m-mvj7) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.33.0,<3.0.0 (GHSA-9wx4-h78v-vm56) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.33.0,<3.0.0 (GHSA-cfj3-7x9c-4p3h) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.33.0,<3.0.0 (GHSA-gc5v-m9x4-r6x2) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.33.0,<3.0.0 (GHSA-x84v-xcm2-53pg) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.33.0,<3.0.0 (PYSEC-2014-13) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.33.0,<3.0.0 (PYSEC-2014-14) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.33.0,<3.0.0 (PYSEC-2018-28) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.33.0,<3.0.0 (PYSEC-2026-1872) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.33.0,<3.0.0 (PYSEC-2026-1873) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.33.0,<3.0.0 (PYSEC-2026-2275) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (GHSA-2xpw-w6gg-jr37) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (GHSA-34jh-p97f-mpxf) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (GHSA-38jv-5279-wg99) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (GHSA-5phf-pp7p-vc2r) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (GHSA-8988-9cw3-xx77) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (GHSA-g4mx-q9vg-27p4) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (GHSA-gm62-xv2j-4w53) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (GHSA-pq67-6m6q-mj2v) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (GHSA-q2q7-5pp4-w6pg) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (GHSA-qccp-gfcp-xxvc) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (GHSA-v845-jxx5-vc9f) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (GHSA-vxq7-64xx-v4gw) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (PYSEC-2021-108) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (PYSEC-2021-59) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (PYSEC-2023-192) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (PYSEC-2023-212) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (PYSEC-2026-141) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (PYSEC-2026-1994) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (PYSEC-2026-1995) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (PYSEC-2026-1996) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (PYSEC-2026-1998) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (PYSEC-2026-1999) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (PYSEC-2026-4175) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@1.26.0 (PYSEC-2026-4177) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.2.2,<2.0.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.2.2,<2.0.0 (PYSEC-2026-2270) dependency_analyzer · 95%
medium
Vulnerable dependency: python-socketio@5.9.0 (GHSA-5w7q-77mv-v69f) dependency_analyzer · 95%
medium
Vulnerable dependency: python-socketio@5.9.0 (GHSA-g8c6-8fjj-2r4m) dependency_analyzer · 95%
medium
Vulnerable dependency: python-socketio@5.9.0 (PYSEC-2026-1854) dependency_analyzer · 95%
medium
Vulnerable dependency: python-socketio@5.9.0 (PYSEC-2026-3042) dependency_analyzer · 95%
medium
Vulnerable dependency: psutil@5.9.0,<6.0.0 (GHSA-qfc5-mcwq-26q8) dependency_analyzer · 95%
medium
Vulnerable dependency: psutil@5.9.0,<6.0.0 (PYSEC-2019-41) dependency_analyzer · 95%
medium
Vulnerable dependency: redis@4.5.0 (GHSA-24wv-mv5m-xv4h) dependency_analyzer · 95%
medium
Vulnerable dependency: redis@4.5.0 (GHSA-8fww-64cx-x8p5) dependency_analyzer · 95%
medium
Vulnerable dependency: redis@4.5.0 (PYSEC-2023-45) dependency_analyzer · 95%
medium
Vulnerable dependency: redis@4.5.0 (PYSEC-2023-46) dependency_analyzer · 95%
medium
Vulnerable dependency: Authlib@1.6.12 (GHSA-6v38-4h7w-rj9h) dependency_analyzer · 95%
medium
Vulnerable dependency: Authlib@1.6.12 (GHSA-7vr2-2fgp-9w7p) dependency_analyzer · 95%
medium
Vulnerable dependency: Authlib@1.6.12 (GHSA-8m4g-j4wp-wgcg) dependency_analyzer · 95%
medium
Vulnerable dependency: Authlib@1.6.12 (GHSA-c5mf-xmp2-59rc) dependency_analyzer · 95%
medium
Vulnerable dependency: Authlib@1.6.12 (GHSA-c73q-w75p-j82v) dependency_analyzer · 95%
medium
Vulnerable dependency: Authlib@1.6.12 (GHSA-fch4-3c6x-j4gc) dependency_analyzer · 95%
medium
Vulnerable dependency: Authlib@1.6.12 (GHSA-jj7h-c3hg-m23x) dependency_analyzer · 95%
medium
Vulnerable dependency: Authlib@1.6.12 (GHSA-q686-2qmg-hqc7) dependency_analyzer · 95%
medium
Vulnerable dependency: Authlib@1.6.12 (GHSA-x4rv-c3wx-4cr8) dependency_analyzer · 95%
medium
Vulnerable dependency: Authlib@1.6.12 (PYSEC-2026-4354) dependency_analyzer · 95%
medium
Vulnerable dependency: Authlib@1.6.12 (PYSEC-2026-4355) dependency_analyzer · 95%
medium
Vulnerable dependency: Authlib@1.6.12 (PYSEC-2026-4356) dependency_analyzer · 95%
medium
Vulnerable dependency: Authlib@1.6.12 (PYSEC-2026-4357) dependency_analyzer · 95%
medium
Vulnerable dependency: Authlib@1.6.12 (PYSEC-2026-4358) dependency_analyzer · 95%
medium
Vulnerable dependency: Authlib@1.6.12 (PYSEC-2026-4359) dependency_analyzer · 95%
medium
Vulnerable dependency: Authlib@1.6.12 (PYSEC-2026-4360) dependency_analyzer · 95%
medium
Vulnerable dependency: django@4.2.30 (GHSA-3h9f-r86x-qvjx) dependency_analyzer · 95%
medium
Vulnerable dependency: django@4.2.30 (GHSA-8cjm-8mp7-r2xf) dependency_analyzer · 95%
medium
Vulnerable dependency: django@4.2.30 (GHSA-8qcx-xf44-272x) dependency_analyzer · 95%
medium
Vulnerable dependency: django@4.2.30 (GHSA-923m-gv2p-w5qp) dependency_analyzer · 95%
medium
Vulnerable dependency: django@4.2.30 (GHSA-crhf-3pfg-w68w) dependency_analyzer · 95%
medium
Vulnerable dependency: django@4.2.30 (GHSA-h7pc-vwp9-298g) dependency_analyzer · 95%
medium
Vulnerable dependency: django@4.2.30 (GHSA-q238-5cxm-5c9h) dependency_analyzer · 95%
medium
Vulnerable dependency: django@4.2.30 (GHSA-wvqv-fj8w-qmhm) dependency_analyzer · 95%
medium
Vulnerable dependency: django@4.2.30 (PYSEC-2026-3717) dependency_analyzer · 95%
medium
Vulnerable dependency: django@4.2.30 (PYSEC-2026-4035) dependency_analyzer · 95%
medium
Vulnerable dependency: djangorestframework@3.17.1 (GHSA-2m8g-3cmr-wg3w) dependency_analyzer · 95%
medium
Vulnerable dependency: djangorestframework@3.17.1 (GHSA-33wh-fxxf-88vv) dependency_analyzer · 95%
medium
Vulnerable dependency: djangorestframework@3.17.1 (GHSA-3547-9m27-7rxg) dependency_analyzer · 95%
medium
Vulnerable dependency: djangorestframework@3.17.1 (GHSA-g47c-3xmw-q6m2) dependency_analyzer · 95%
medium
Vulnerable dependency: djangorestframework@3.17.1 (GHSA-xw6w-gcfp-cf8m) dependency_analyzer · 95%
medium
Vulnerable dependency: djangorestframework@3.17.1 (PYSEC-2026-3827) dependency_analyzer · 95%
medium
Vulnerable dependency: djangorestframework@3.17.1 (PYSEC-2026-3828) dependency_analyzer · 95%
medium
Vulnerable dependency: social-auth-app-django@5.3.0 (GHSA-2gr8-3wc7-xhj3) dependency_analyzer · 95%
medium
Vulnerable dependency: social-auth-app-django@5.3.0 (GHSA-wv4w-6qv2-qqfg) dependency_analyzer · 95%
medium
Vulnerable dependency: social-auth-app-django@5.3.0 (PYSEC-2026-1931) dependency_analyzer · 95%
medium
Vulnerable dependency: social-auth-app-django@5.3.0 (PYSEC-2026-1932) dependency_analyzer · 95%
medium
Vulnerable dependency: social-auth-core@4.4.2 (GHSA-3c93-f73f-qc9h) dependency_analyzer · 95%
medium
Vulnerable dependency: social-auth-core@4.4.2 (GHSA-526j-582w-7fm9) dependency_analyzer · 95%
medium
Vulnerable dependency: social-auth-core@4.4.2 (GHSA-fp7w-m676-w7gc) dependency_analyzer · 95%
medium
Vulnerable dependency: social-auth-core@4.4.2 (GHSA-h2r5-x5m7-3935) dependency_analyzer · 95%
medium
Vulnerable dependency: social-auth-core@4.4.2 (GHSA-vq6g-g6c7-5f2j) dependency_analyzer · 95%
medium
Vulnerable dependency: social-auth-core@4.4.2 (GHSA-vqg6-3fw6-j9jg) dependency_analyzer · 95%
medium
Vulnerable dependency: social-auth-core@4.4.2 (GHSA-x7qq-23vw-7pfg) dependency_analyzer · 95%
medium
Vulnerable dependency: social-auth-core@4.4.2 (PYSEC-2026-4165) dependency_analyzer · 95%
medium
Vulnerable dependency: social-auth-core@4.4.2 (PYSEC-2026-4166) dependency_analyzer · 95%
medium
Vulnerable dependency: social-auth-core@4.4.2 (PYSEC-2026-4167) dependency_analyzer · 95%
medium
Vulnerable dependency: social-auth-core@4.4.2 (PYSEC-2026-4168) dependency_analyzer · 95%
medium
Vulnerable dependency: social-auth-core@4.4.2 (PYSEC-2026-4169) dependency_analyzer · 95%
medium
Vulnerable dependency: azure-identity@1.16.0 (GHSA-m5vv-6r4h-3vj9) dependency_analyzer · 95%
medium
Vulnerable dependency: azure-identity@1.16.0 (PYSEC-2026-1209) dependency_analyzer · 95%
medium
Vulnerable dependency: protobuf@4.25.0 (GHSA-7gcm-g887-7qv7) dependency_analyzer · 95%
medium
Vulnerable dependency: protobuf@4.25.0 (GHSA-8qvm-5x2c-j2w7) dependency_analyzer · 95%
medium
Vulnerable dependency: protobuf@4.25.0 (PYSEC-2026-1805) dependency_analyzer · 95%
medium
Vulnerable dependency: protobuf@4.25.0 (PYSEC-2026-1806) dependency_analyzer · 95%
medium
Vulnerable dependency: qdrant-client@1.16.0,<1.17.0 (GHSA-7m75-x27w-r52r) dependency_analyzer · 95%
medium
Vulnerable dependency: qdrant-client@1.16.0,<1.17.0 (PYSEC-2026-509) dependency_analyzer · 95%
high
Long hex escape sequence in Zipstack-unstract-2164d7b/backend/account_v2/test_user_profile.py:38 entropy_analyzer · 85%
high
Long hex escape sequence in Zipstack-unstract-2164d7b/backend/account_v2/test_user_profile.py:41 entropy_analyzer · 85%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (328) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 90 components sbom_generator · 100%
high
Generic API Key Assignment found in Zipstack-unstract-2164d7b/workers/README.md secret_scanner · 75%
critical
Database URL with Password found in Zipstack-unstract-2164d7b/workers/sample.env secret_scanner · 85%
high
Hardcoded Password found in Zipstack-unstract-2164d7b/backend/README.md secret_scanner · 65%
high
Hardcoded Password found in Zipstack-unstract-2164d7b/backend/sample.env secret_scanner · 65%
critical
Database URL with Password found in Zipstack-unstract-2164d7b/.claude/skills/connector-ops/references/json_schema_examples.md secret_scanner · 85%
high
Hardcoded Password found in Zipstack-unstract-2164d7b/runner/src/unstract/runner/constants.py secret_scanner · 65%
high
Generic API Key Assignment found in Zipstack-unstract-2164d7b/workers/shared/constants/env_vars.py secret_scanner · 75%
high
Hardcoded Password found in Zipstack-unstract-2164d7b/workers/shared/constants/env_vars.py secret_scanner · 65%
high
Generic API Key Assignment found in Zipstack-unstract-2164d7b/workers/shared/infrastructure/config/worker_config.py secret_scanner · 75%
high
Generic API Key Assignment found in Zipstack-unstract-2164d7b/workers/executor/executors/constants.py secret_scanner · 75%
high
Generic API Key Assignment found in Zipstack-unstract-2164d7b/frontend/src/index.jsx secret_scanner · 75%
high
Authorization Bearer Token found in Zipstack-unstract-2164d7b/frontend/src/components/deployments/display-code/DisplayCode.jsx secret_scanner · 70%
critical
Database URL with Password found in Zipstack-unstract-2164d7b/unstract/connectors/src/unstract/connectors/databases/postgresql/static/json_schema.json secret_scanner · 85%
high
Hardcoded Password found in Zipstack-unstract-2164d7b/unstract/connectors/src/unstract/connectors/filesystems/sftp/sftp.py secret_scanner · 65%
high
Generic API Key Assignment found in Zipstack-unstract-2164d7b/unstract/workflow-execution/src/unstract/workflow_execution/constants.py secret_scanner · 75%
high
Hardcoded Password found in Zipstack-unstract-2164d7b/unstract/workflow-execution/src/unstract/workflow_execution/constants.py secret_scanner · 65%
high
Generic API Key Assignment found in Zipstack-unstract-2164d7b/unstract/sdk1/src/unstract/sdk1/constants.py secret_scanner · 75%
high
Generic API Key Assignment found in Zipstack-unstract-2164d7b/unstract/sdk1/src/unstract/sdk1/adapters/x2text/constants.py secret_scanner · 75%
high
Hardcoded Password found in Zipstack-unstract-2164d7b/unstract/sdk1/src/unstract/sdk1/adapters/vectordb/postgres/src/postgres.py secret_scanner · 65%
critical
Database URL with Password found in Zipstack-unstract-2164d7b/unstract/sdk1/src/unstract/sdk1/adapters/vectordb/supabase/src/supabase.py secret_scanner · 85%
high
Hardcoded Password found in Zipstack-unstract-2164d7b/unstract/sdk1/src/unstract/sdk1/adapters/vectordb/supabase/src/supabase.py secret_scanner · 65%
high
Generic API Key Assignment found in Zipstack-unstract-2164d7b/x2text-service/app/controllers/controller.py secret_scanner · 75%
high
Hardcoded Password found in Zipstack-unstract-2164d7b/tool-sidecar/src/unstract/tool_sidecar/constants.py secret_scanner · 65%
high
Generic API Key Assignment found in Zipstack-unstract-2164d7b/backend/prompt_studio/prompt_studio_core_v2/constants.py secret_scanner · 75%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%