VYPR

Vibe-Trading

by Vibe Trading

CVEs (1)

  • CVE-2026-58170Jun 30, 2026
    risk 0.00cvss epss 0.00

    Vibe-Trading before 0.1.10 builds the proposal file path by joining a caller-supplied proposal identifier onto the broker proposals directory without sanitization (agent/src/live/mandate/commit.py). A proposal identifier containing path traversal sequences causes the application…