openhands-agent-server

OpenHands Agent Server - REST/WebSocket interface for OpenHands AI Agent

Latest 1.61.0

PyPIMIT

78%

Total Score

healthy

The project is active and widely contributed, but its workflows leave release and pull-request paths exposed.

Are you affected? Scan for Free

Health Score Breakdown

Build provenance

The release has no build attestation or trusted publisher identity, so its published artifact cannot be tied to a recorded build.

Repo package mention

The repository name does not match openhands-agent-server and its README does not mention the package, so the package-to-repository link is not clear from these checks.

Security policy

The repository has no security policy file.

Workflow audit

The audit covered 30 of 37 workflows. integration-runner.yml checks out untrusted pull-request code and expands untrusted input into shell commands, while pypi-release.yml publishes with a long-lived token instead of trusted publishing.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-129575 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. openhands-agent-server is vulnerable to Binding to an Unrestricted IP Address in versions 1.0.0 - 1.37.0.	1.0.0 - 1.37.0	High
AIKIDO-2026-781100 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. openhands-agent-server is vulnerable to Insertion of Sensitive Information into Externally Accessible File or Directory in versions 1.21.0 - 1.39.1.	1.21.0 - 1.39.1	Medium
AIKIDO-2026-807360 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. openhands-agent-server is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 1.0.0 - 1.37.0.	1.0.0 - 1.37.0	Medium
AIKIDO-2026-157592 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. openhands-agent-server is vulnerable to Uncontrolled Resource Consumption in versions 1.0.0 - 1.22.0.	1.0.0 - 1.22.0	Low
AIKIDO-2026-69310 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. openhands-agent-server is vulnerable to Authentication Bypass in versions 1.29.0 - 1.29.0.	1.29.0 - 1.29.0	Medium

Package versions

Version	Published	Vulnerabilities
1.61.0	9 Nov 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
1.60.2	6 Nov 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
1.60.1	5 Nov 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
1.60.0	5 Nov 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
1.59.0	28 Oct 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
1.58.2	25 Oct 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
1.58.1	23 Oct 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
1.58.0	22 Oct 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
1.57.0	21 Oct 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total
1.56.0	19 Oct 2026	0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
aiosqlite Version >=0.22.1	—	—
alembic Version >=1.20.1	—	—
certifi Version >=2026.10.19	—	—
docker Version <8,>=7.2.0	—	—
fastapi Version >=0.104	—	—