by Tiledesk
Tiledesk Server is the main API component of the Tiledesk platform 🚀 Tiledesk is an open-source alternative to Voiceflow, allowing you to build advanced LLM-powered agents with easy human-in-the-loop (HITL) when necessary.
# Add to your Claude Code skills
git clone https://github.com/Tiledesk/tiledesk-serverGuides for using ai agents skills like tiledesk-server.
Last scanned: 5/24/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@aws-sdk/client-cognito-identity: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/client-sso: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/client-sso-oidc: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/client-sts: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/credential-provider-cognito-identity: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/credential-provider-ini: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/credential-provider-node: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/credential-provider-sso: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/credential-providers: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/middleware-retry: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@aws-sdk/token-providers: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@chat21/chat21-node-sdk: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@firebase/firestore: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@google-cloud/firestore: Logging of the firestore key within nodejs-firestore",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@google-cloud/storage: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@grpc/grpc-js: @grpc/grpc-js can allocate memory for incoming messages well above configured limits",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@grpc/proto-loader: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@messageformat/runtime: messageformat prototype pollution vulnerability",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@protobufjs/utf8: protobufjs has overlong UTF-8 decoding",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@tiledesk-ent/tiledesk-server-request-history: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@tiledesk/helpcenter-query-client: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-apps: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-chat21-app: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-chatbot-client: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-chatbot-plugs: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-client: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-dialogflow-connector: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-kaleyra-proxy: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-messenger-connector: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-multi-worker: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-rasa-connector: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-sms-connector: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-telegram-connector: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-tybot-connector: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-voice-twilio-connector: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-vxml-connector: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-whatsapp-connector: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@tiledesk/tiledesk-whatsapp-jobworker: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "@tootallnate/once: @tootallnate/once vulnerable to Incorrect Control Flow Scoping",
"severity": "low"
},
{
"type": "npm-audit",
"message": "actions-on-google: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ajv: ajv has ReDoS when using `$data` option",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "amqplib: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "axios: Axios vulnerable to Server-Side Request Forgery",
"severity": "high"
},
{
"type": "npm-audit",
"message": "body-parser: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion Regular Expression Denial of Service vulnerability",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "braces: Uncontrolled resource consumption in braces",
"severity": "high"
},
{
"type": "npm-audit",
"message": "busboy: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "cachegoose: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "cacheman: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "cheerio: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "clean-css: Regular Expression Denial of Service in clean-css",
"severity": "low"
},
{
"type": "npm-audit",
"message": "constantinople: Sandbox Bypass Leading to Arbitrary Code Execution in constantinople",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "cookie: cookie accepts cookie name, path, and domain with out of bounds characters",
"severity": "low"
},
{
"type": "npm-audit",
"message": "cookie-parser: Vulnerability found",
"severity": "low"
},
{
"type": "npm-audit",
"message": "crypto-js: crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "css-select: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "dialogflow: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "dialogflow-fulfillment: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "dicer: Crash in HeaderParser in dicer",
"severity": "high"
},
{
"type": "npm-audit",
"message": "diff: jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch",
"severity": "low"
},
{
"type": "npm-audit",
"message": "dompurify: DOMPurify contains a Cross-site Scripting vulnerability",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "downcache: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "download: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "email-templates: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "es5-ext: es5-ext vulnerable to Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`",
"severity": "low"
},
{
"type": "npm-audit",
"message": "express: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "express-ipfilter: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "express-session: Vulnerability found",
"severity": "low"
},
{
"type": "npm-audit",
"message": "fast-xml-parser: fast-xml-parser vulnerable to Prototype Pollution through tag or attribute name",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "file-type: file-type vulnerable to Infinite Loop via malformed MKV file",
"severity": "high"
},
{
"type": "npm-audit",
"message": "firebase: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "firebase-admin: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "follow-redirects: Exposure of Sensitive Information to an Unauthorized Actor in follow-redirects",
"severity": "high"
},
{
"type": "npm-audit",
"message": "form-data: form-data uses unsafe random function in form-data for choosing boundary",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "gcp-metadata: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "geoip-lite: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "get-func-name: Chaijs/get-func-name vulnerable to ReDoS",
"severity": "high"
},
{
"type": "npm-audit",
"message": "google-auth-library: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "google-gax: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "google-p12-pem: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "googleapis: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "googleapis-common: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "got: Got allows a redirect to a UNIX socket",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "gtoken: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "handlebars: Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "i18next-fs-backend: i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwrite",
"severity": "high"
},
{
"type": "npm-audit",
"message": "immutable: Immutable is vulnerable to Prototype Pollution",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ip: ip SSRF improper categorization in isPublic",
"severity": "high"
},
{
"type": "npm-audit",
"message": "ip-address: ip-address has XSS in Address6 HTML-emitting methods",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "jade: Vulnerability found",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "jose: jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "js-yaml: js-yaml has prototype pollution in merge (<<)",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "json-bigint: Uncontrolled Resource Consumption in json-bigint",
"severity": "high"
},
{
"type": "npm-audit",
"message": "jsonwebtoken: jsonwebtoken unrestricted key type could lead to legacy keys usage ",
"severity": "high"
},
{
"type": "npm-audit",
"message": "jws: auth0/node-jws Improperly Verifies HMAC Signature",
"severity": "high"
},
{
"type": "npm-audit",
"message": "liquidjs: liquidjs has a path traversal fallback vulnerability",
"severity": "high"
},
{
"type": "npm-audit",
"message": "lodash: Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions",
"severity": "high"
},
{
"type": "npm-audit",
"message": "lodash.pick: Prototype Pollution in lodash",
"severity": "high"
},
{
"type": "npm-audit",
"message": "mailparser: mailparser vulnerable to Cross-site Scripting",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "marked: Inefficient Regular Expression Complexity in marked",
"severity": "high"
},
{
"type": "npm-audit",
"message": "migrate-mongoose: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "minimatch: minimatch ReDoS vulnerability",
"severity": "high"
},
{
"type": "npm-audit",
"message": "minimist: Prototype Pollution in minimist",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "mkdirp: Vulnerability found",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "mocha: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "mongodb: MongoDB Driver may publish events containing authentication-related data",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "mongodb-runner: Vulnerability found",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "mongodb-tools: Vulnerability found",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "mongodb-version-list: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "mongodb-version-manager: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "mongoose: Mongoose Prototype Pollution vulnerability",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "morgan: Vulnerability found",
"severity": "low"
},
{
"type": "npm-audit",
"message": "ms: Vercel ms Inefficient Regular Expression Complexity vulnerability",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "multer: Multer vulnerable to Denial of Service from maliciously crafted requests",
"severity": "high"
},
{
"type": "npm-audit",
"message": "nanoid: Predictable results in nanoid generation when given non-integer values",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "node-forge: Prototype Pollution in node-forge debug API.",
"severity": "high"
},
{
"type": "npm-audit",
"message": "nodemailer: nodemailer ReDoS when trying to send a specially crafted email",
"severity": "high"
},
{
"type": "npm-audit",
"message": "nodemon: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "nth-check: Inefficient Regular Expression Complexity in nth-check",
"severity": "high"
},
{
"type": "npm-audit",
"message": "on-headers: on-headers is vulnerable to http response header manipulation",
"severity": "low"
},
{
"type": "npm-audit",
"message": "passport: Passport vulnerable to session regeneration when a users logs in or out",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "path-to-regexp: path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters",
"severity": "high"
},
{
"type": "npm-audit",
"message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"severity": "high"
},
{
"type": "npm-audit",
"message": "preview-email: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "proto3-json-serializer: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "protobufjs: protobufjs Prototype Pollution vulnerability",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "pug: Pug allows JavaScript code execution if an application accepts untrusted input",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "pug-code-gen: Pug allows JavaScript code execution if an application accepts untrusted input",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "qs: qs's arrayLimit bypass in comma parsing allows denial of service",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "request: Server-Side Request Forgery in Request",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "request-promise: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "request-promise-core: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "semver: semver vulnerable to Regular Expression Denial of Service",
"severity": "high"
},
{
"type": "npm-audit",
"message": "serialize-javascript: Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()",
"severity": "high"
},
{
"type": "npm-audit",
"message": "sharp: sharp vulnerable to Command Injection in post-installation over build environment",
"severity": "high"
},
{
"type": "npm-audit",
"message": "simple-update-notifier: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "sitemapper: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "tar-fs: tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball",
"severity": "high"
},
{
"type": "npm-audit",
"message": "teeny-request: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "tough-cookie: tough-cookie Prototype Pollution vulnerability",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "transformers: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "uglify-js: Regular Expression Denial of Service in uglify-js",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "underscore: Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack",
"severity": "high"
},
{
"type": "npm-audit",
"message": "url-parse: Authorization Bypass Through User-Controlled Key in url-parse",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "uuid: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "uuidv4: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "validator: validator.js has a URL validation bypass vulnerability in its isURL function",
"severity": "high"
},
{
"type": "npm-audit",
"message": "vm2: vm2 Sandbox Escape vulnerability",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "word-wrap: word-wrap vulnerable to Regular Expression Denial of Service",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "ws: ws affected by a DoS when handling a request with many HTTP headers",
"severity": "high"
},
{
"type": "npm-audit",
"message": "yaml: yaml is vulnerable to Stack Overflow via deeply nested YAML collections",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "yargs: Vulnerability found",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "yargs-parser: yargs-parser Vulnerable to Prototype Pollution",
"severity": "medium"
}
],
"status": "FAILED",
"scannedAt": "2026-05-24T07:24:25.071Z",
"semgrepRan": false,
"npmAuditRan": true,
"pipAuditRan": true
}No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
🚀 Do you want to install Tiledesk on your server with just one click?
Use Docker Compose Tiledesk installation guide
Tiledesk-server is the server engine of Tiledesk. Tiledesk is an Open Source Live Chat platform with integrated Chatbots written in NodeJs and Express. Build your own customer support with a multi-channel platform for Web, Android and iOS.
Designed to be open source since the beginning, we actively worked on it to create a totally new, first class customer service platform based on instant messaging.
What is Tiledesk today? It became the open source “conversational app development” platform that everyone needs 😌
You can use Tiledesk to increase sales for your website or for post-sales customer service. Every conversation can be automated using our first class native chatbot technology. You can also connect your own applications using our APIs or Webhooks. Moreover you can deploy entire visual applications inside a conversation. And your applications can converse with your chatbots or your end-users! We know this is cool 😎
Tiledesk is multichannel in a totally new way. You can write your chatbot scripts with images, buttons and other cool elements that your channels support. But you will configureyour chatbot replies only once. They will run on every channel, auto-adapting the responses to the target channel whatever it is, Whatsapp, Facebook Messenger, Telegram etc.
More info on Tiledesk website: https://www.tiledesk.com.
You can find technical documentation here: https://developer.tiledesk.com
Do you want to install all the Tiledesk components on your server with just one click? Use Docker Compose Tiledesk installation guide
curl https://raw.githubusercontent.com/Tiledesk/tiledesk-server/master/.env.sample --output .env
nano .env #configure .env file properly
If you want to run tiledesk and mongo with docker run :
docker run --name tiledesk-mongo -d mongo
docker run -p 3000:3000 --env DATABASE_URI="mongodb://mongo/tiledesk-server" --env-file .env --link tiledesk-mongo:mongo tiledesk/tiledesk-server
Otherwise if you want to run tiledesk only with docker run :
docker run -p 3000:3000 --env DATABASE_URI="mongodb://YOUR_MONGO_INSTALLATION_ENDPOINT/tiledesk-server" --env-file .env tiledesk/tiledesk-server
Steps to run with npm:
npm install -g @tiledesk/tiledesk-server mongodb-runner
mongodb-runner start
curl https://raw.githubusercontent.com/Tiledesk/tiledesk-server/master/.env.sample --output .env
nano .env #configure .env file properly
tiledesk-server
If you want to load .env file from another path: DOTENV_PATH=/MY/ABSOLUTE/PATH/.env tiledesk-server
Note: If installation with -g fails due to permission problems (npm ERR! code 'EACCES'), please refer to this link.
npm installnpm start.Deploy with button:
If you need help or just want to hang out, come, say hi on our Discord server.
See the Tiledesk REST API here
To see how to upgrade tiledesk-server see here
Run unit test with npm test and integration test with npm run test:int