Skip to content

SBOM for mistral-vibe 3.1.0

Minimal CLI coding agent by Mistral

CycloneDX PEP 740 attested 7 known vulnerabilities

Author: Mistral AI
License: Apache-2.0
Requires Python: >=3.12
PyPI: mistral-vibe 3.1.0
Documentation: https://github.com/mistralai/mistral-vibe#readme
Homepage: https://github.com/mistralai/mistral-vibe
Issues: https://github.com/mistralai/mistral-vibe/issues
Repository: https://github.com/mistralai/mistral-vibe

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

mistral_vibe-3.1.0-cp312-abi3-macosx_11_0_arm64.whl

Attested

Publisher: GitHub Source: mistralai/mistral-vibe Workflow: release.yml Environment: pypi

mistralai-unified-harness.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 7 known vulnerabilities

mistral_vibe-3.1.0-cp312-abi3-macosx_11_0_x86_64.whl

Attested

Publisher: GitHub Source: mistralai/mistral-vibe Workflow: release.yml Environment: pypi

mistralai-unified-harness.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 7 known vulnerabilities

mistral_vibe-3.1.0-cp312-abi3-manylinux_2_28_aarch64.whl

Attested

Publisher: GitHub Source: mistralai/mistral-vibe Workflow: release.yml Environment: pypi

mistralai-unified-harness.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 7 known vulnerabilities

mistral_vibe-3.1.0-cp312-abi3-manylinux_2_28_x86_64.whl

Attested

Publisher: GitHub Source: mistralai/mistral-vibe Workflow: release.yml Environment: pypi

mistralai-unified-harness.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 7 known vulnerabilities

mistral_vibe-3.1.0-cp312-abi3-win_amd64.whl

Attested

Publisher: GitHub Source: mistralai/mistral-vibe Workflow: release.yml Environment: pypi

mistralai-unified-harness.cyclonedx.json

CycloneDX/1.5 application/vnd.cyclonedx+json 7 known vulnerabilities

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-09.

Vulnerability	Severity	Component	Fixed in
RUSTSEC-2026-0461 Unbounded tool schema cache in Streamable HTTP server transport	High 7.5	rmcp 3.1.2 crates.io	3.6.0
RUSTSEC-2026-0462 Unbounded response body buffering in Streamable HTTP clients	Medium 6.5	rmcp 3.1.2 crates.io	3.9.0
RUSTSEC-2025-0141 Bincode is unmaintained	Unknown	bincode 1.3.3 crates.io	—
RUSTSEC-2024-0436 paste - no longer maintained	Unknown	paste 1.0.15 crates.io	—
RUSTSEC-2026-0457 OAuth client SSRF filter checks host strings, not resolved addresses	Unknown	rmcp 3.1.2 crates.io	3.7.0
RUSTSEC-2026-0249 smartstring is unmaintained	Unknown	smartstring 1.0.1 crates.io	—
RUSTSEC-2026-0386 `AsyncFd::new` and related constructors violate I/O safety	Unknown	tokio 1.53.1 crates.io	1.53.3

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]