network-ai
AI agent orchestration framework for TypeScript/Node.js - 32 adapters (LangChain, AutoGen, CrewAI, OpenAI Assistants, OpenAI Responses, LlamaIndex, Semantic Kernel, Haystack, DSPy, Agno, MCP, OpenClaw, A2A, Codex, MiniMax, NemoClaw, APS, Copilot, LangGrap
Security Advisories for network-ai in npm
Moderate
2 months ago
Network-AI: EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data
npm
network-ai
Moderate
2 months ago
Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups
npm
network-ai
Moderate
2 months ago
Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions
npm
network-ai
Moderate
2 months ago
Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory
npm
network-ai
High
2 months ago
Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning
npm
network-ai
Critical
2 months ago
Network-AI: Improper Neutralization of Special Elements used in an OS Command
npm
network-ai
Critical
2 months ago
Network-AI: CVE-2026-46701 fix incomplete — empty default secret still authorizes all requests
npm
network-ai
High
3 months ago
Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret
npm
network-ai
High
4 months ago
Network-AI missing authentication on MCP HTTP endpoint, which allows unauthenticated privileged tool calls
npm
network-ai