vibe-trading-ai
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- PyPI
- Vulnerability status
- 3 advisory(ies) without a verdict
Advisories (3)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-5rmq-chc7-m22f Vibe-Trading file-read tools expose arbitrary server-readable files | 0.1.0 – < 0.1.7 | Undetermined |
| GHSA-jqmf-mx4f-hfr6 Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF | 0.1.0 – < 0.1.7 | Undetermined |
| GHSA-v2f8-6655-7grj Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chain | 0.1.0 – < 0.1.7 | Undetermined |
Sources
| Source | Licence |
|---|