Research
Andesyte runs free on every public repository. When it finds something real we report it upstream, and the fix lands with the maintainers who own the code.
server: "andesyte"
tool: "andesyte_research"
arguments: { repo: "infiniflow/ragflow", path: "deserialize_b64" }
api/utils/configs.py
api/db/db_models.py
SECURITY.md
security: always use RestrictedUnpickler in deserialize_b64 #14803
andesyteoss wants to merge 1 commit into main
def deserialize_b64(src): if use_deserialize_safe_module: return restricted_loads(src) return pickle.loads(src) return restricted_loads(src)The default branch called pickle.loads on bytes read from a database field. Routing every payload through the existing restricted loader removes the insecure default without changing the serialized format.
This branch has not been deployed
No deployments
All checks have passed
1 successful check
No conflicts with base branch
Merging can be performed automatically.
For maintainers
Open Connect on any public GitHub or GitLab repository and inline security review runs on every change, at no cost. Fifty audits per repo per month, no card, CWE-tagged findings cross-checked against OSV.dev. We would rather catch the next Log4Shell early than put another signup wall in front of it.
Disclosures
When Andesyte finds a vulnerability in an open-source dependency we go through coordinated disclosure. Patches are submitted under individual names where the project allows it, and CVE credit lands on the reporter rather than on Andesyte.
OSS projects we've helped secure
NVIDIA
Hugging Face
RAGFlow
three.js
Sentry
ZenML
FastGPT
MaxKB
Koodo ReaderContributions
Search merged pull requests Andesyte has supported across widely used open-source repositories.
Language
Severity
Showing 43 of 43 projects
JavaScript
JavaScript 3D Library.
RAG framework
RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs
Developer tool
A terminal for a more modern age
Scraping & automation
A visual no-code/code-free web crawler/spider易采集：一个可视化浏览器自动化测试/数据采集/网页爬虫软件，可以无代码图形化的设计和执行爬虫任务。别名：ServiceWrapper面向Web应用的智能化服务封装系统。
AI agent
LLM驱动的 A/H/美股智能分析：多数据源行情 + 实时新闻 + LLM决策仪表盘 + 多渠道推送，零成本定时运行，纯白嫖. LLM-powered stock analysis system for A/H/US markets.
RAG framework
[EMNLP2025] "LightRAG: Simple and Fast Retrieval-Augmented Generation"
MCP server
AI Agent Assistant & development framework that integrates lots of IM platforms, LLMs, plugins and AI feature, and can be your openclaw alternative. ✨
Developer tool
🕵️♂️ Collect a dossier on a person by username from 3000+ sites
MCP server
FastGPT is a knowledge-based platform built on the LLMs, offers a comprehensive suite of out-of-the-box capabilities such as data processing, RAG retrieval, and visual AI workflow orchestration, letting you easily develop and deploy complex question-answering systems without the need for extensive setup or configuration.
TypeScript
Project N.O.M.A.D, is a self-contained, offline survival computer packed with critical tools, knowledge, and AI to keep you informed and empowered—anytime, anywhere.
JavaScript
A modern ebook manager and reader with sync and backup capacities for Windows, macOS, Linux, Android, iOS and Web
JavaScript
GitHub 汉化插件，GitHub 中文化界面。 (GitHub Translation To Chinese)
MCP server
🔥 MaxKB is an open-source platform for building enterprise-grade agents. 强大易用的开源企业级智能体平台。
RAG framework
Production-grade platform for building agentic IM bots - 生产级多平台智能机器人开发平台. 提供 Agent、知识库编排、插件系统 / Bots for Discord / Slack / LINE / Telegram / WeChat(企业微信, 企微智能机器人, 公众号) / 飞书 / 钉钉 / QQ / Satori e.g. Integrated with ChatGPT(GPT), DeepSeek, Dify, n8n, Langflow, Coze, Claude, Gemini, MiniMax, Ollama, SiliconFlow, Moonshot, GLM, openclaw / hermes agent
AI agent
🏛️ 三省六部制 · OpenClaw Multi-Agent Orchestration System — 9 specialized AI agents with real-time dashboard, model config, and full audit trails
MCP server
📻Terminal/ssh/sftp/ftp/telnet/serialport/RDP/VNC/Spice client(linux, mac, win)
AI agent
Give your agents the power of the Hugging Face ecosystem
RAG framework
PraisonAI 🦞 — Hire a 24/7 AI Workforce. Stop writing boilerplate and start shipping autonomous self-improving agents that research, plan, code, and execute tasks. Deployed in 5 lines of code with built-in memory, RAG, and support for 100+ LLMs.
Developer tool
Point at any URL/YouTube/Podcast or file. Get the gist. CLI and Chrome Extension.
MCP server
A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
AI agent
ZenML 🙏: One AI Platform from Pipelines to Agents. https://zenml.io.
AI agent
The RL Bridge for LLM-based Agent Applications. Made Simple & Flexible.
MCP server
5ire is a cross-platform desktop AI assistant, MCP client. It compatible with major service providers, supports local knowledge base and tools via model context protocol servers .
RAG framework
AutoRAG: An Open-Source Framework for Retrieval-Augmented Generation (RAG) Evaluation & Optimization with AutoML-Style Automation
RAG framework
Your agent in your terminal, equipped with local tools: writes code, uses the terminal, browses the web. Make your own persistent autonomous agent on top!
MCP server
An MCP server plus a CLI tool that indexes local code into a graph database to provide context to AI assistants.
MCP server
Stop configuring your AI stack. Start using it. One command brings a complete pre-wired LLM stack with hundreds of services to explore.
Observability
CheckCle is a self-hosted, open-source monitoring platform for seamless, real-time full-stack systems, applications, and infrastructure. It provides real-time uptime monitoring, distributed checks, incident tracking, and alerts. All deployable anywhere.
MCP server
Control Gmail, Google Calendar, Docs, Sheets, Slides, Chat, Forms, Tasks, Search & Drive with AI - Comprehensive Google Workspace / G Suite MCP Server & CLI Tool
MCP server
A unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies.
Security
🕵️♂️ (2-in-1) Email & Username OSINT suite. Analyzes 205+ scan vectors (100+ email / 105+ username) for security research, investigations, and digital footprinting.
MCP server
Semantic Intelligence for Large-Scale Engineering. Context+ is an MCP server designed for developers who demand 99% accuracy. By combining RAG, Tree-sitter AST, Spectral Clustering, and Obsidian-style linking, Context+ turns a massive codebase into a searchable, hierarchical feature graph.
MCP server
MCP Server for kubernetes management commands
MCP server
Grounded Docs MCP Server: Open-Source Alternative to Context7, Nia, and Ref.Tools
RAG framework
Full-stack AI app generator — FastAPI + Next.js with AI Agents, RAG, streaming, auth, and 20+ integrations out of the box.
1.3kSelf-host the powerful Chatterbox TTS model. This server offers a user-friendly Web UI, flexible API endpoints (incl. OpenAI compatible), predefined voices, voice cloning, and large audiobook-scale text processing. Runs accelerated on NVIDIA (CUDA), AMD (ROCm), and CPU.
MCP server
AIPex: AI browser automation assistant, no migration and privacy first. Alternative to Manus Browser Operator、 Claude Chrome and Agent Browser
AI agent
Open source alternative to LangGraph Platform (now LangSmith Deployments) - Self-hosted AI agent backend with FastAPI and PostgreSQL. Zero vendor lock-in, full control over your agent infrastructure.
MCP server
MCP Server for SearXNG
MCP server
📄 Production-ready MCP server for PDF processing - 5-10x faster with parallel processing and 94%+ test coverage
MCP server
A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API
RAG framework
This NVIDIA RAG blueprint serves as a reference solution for a foundational Retrieval Augmented Generation (RAG) pipeline.
MCP server
The Ultimate Google Docs, Sheets, Drive, Gmail, & Google Calendar MCP Server. This MCP (primarily for use in Claude Desktop) gains full access to your google suite and lets claude do its thing.