VYPR

Nanobot

by Npm

CVEs (1)

  • CVE-2026-48716Jun 18, 2026
    risk 0.00cvss epss

    nanobot is a personal AI assistant. In versions 0.1.5.post3 and prior, the WhatsApp bridge in bridge/src/whatsapp.ts constructs a filesystem path using the fileName field from an incoming WhatsApp document message without sanitization. The WhatsApp bridge downloads media…