{"url":"https://pypi.sbomify.com/package/mistral-vibe/3.1.0","markdown_url":"https://pypi.sbomify.com/package/mistral-vibe/3.1.0.md","name":"mistral-vibe","version":"3.1.0","purl":"pkg:pypi/mistral-vibe@3.1.0","summary":"Minimal CLI coding agent by Mistral","author":"Mistral AI","project_urls":{"Documentation":"https://github.com/mistralai/mistral-vibe#readme","Homepage":"https://github.com/mistralai/mistral-vibe","Issues":"https://github.com/mistralai/mistral-vibe/issues","Repository":"https://github.com/mistralai/mistral-vibe"},"requires_python":">=3.12","license":"Apache-2.0","classifiers":["Development Status :: 5 - Production/Stable","Intended Audience :: Developers","License :: OSI Approved :: Apache Software License","Programming Language :: Python","Programming Language :: Python :: 3","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Topic :: Software Development","Topic :: Software Development :: Libraries :: Python Modules","Topic :: Utilities"],"wheels":[{"filename":"mistral_vibe-3.1.0-cp312-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/2c/4e/77e0388811b74a0210d7be40ca6de6d5747c85f284e608369e837298eb37/mistral_vibe-3.1.0-cp312-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"82bc6c90-19af-5445-9c3f-666a73e02d9a","path":"mistral_vibe-3.1.0.dist-info/sboms/mistralai-unified-harness.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/82bc6c90-19af-5445-9c3f-666a73e02d9a/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"mistralai/mistral-vibe","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/mistralai/mistral-vibe/.github/workflows/release.yml@refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.10":"c96a6dbb34d34f8a868b3f67b279ecabbf1aa616","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/mistralai/mistral-vibe","1.3.6.1.4.1.57264.1.13":"c96a6dbb34d34f8a868b3f67b279ecabbf1aa616","1.3.6.1.4.1.57264.1.14":"refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.15":"1112533539","1.3.6.1.4.1.57264.1.16":"https://github.com/mistralai","1.3.6.1.4.1.57264.1.17":"132372032","1.3.6.1.4.1.57264.1.18":"https://github.com/mistralai/mistral-vibe/.github/workflows/release.yml@refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.19":"c96a6dbb34d34f8a868b3f67b279ecabbf1aa616","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/mistralai/mistral-vibe/actions/runs/41798273990/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"mistral_vibe-3.1.0-cp312-abi3-macosx_11_0_x86_64.whl","url":"https://files.pythonhosted.org/packages/66/f3/93da2603fbfa533443d192d1aea2502ea35998f907d025496fa153f942a2/mistral_vibe-3.1.0-cp312-abi3-macosx_11_0_x86_64.whl","sboms":[{"artifact_uuid":"6dfd0e22-680b-5801-ba76-6dc3cf964aab","path":"mistral_vibe-3.1.0.dist-info/sboms/mistralai-unified-harness.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/6dfd0e22-680b-5801-ba76-6dc3cf964aab/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"mistralai/mistral-vibe","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/mistralai/mistral-vibe/.github/workflows/release.yml@refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.10":"c96a6dbb34d34f8a868b3f67b279ecabbf1aa616","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/mistralai/mistral-vibe","1.3.6.1.4.1.57264.1.13":"c96a6dbb34d34f8a868b3f67b279ecabbf1aa616","1.3.6.1.4.1.57264.1.14":"refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.15":"1112533539","1.3.6.1.4.1.57264.1.16":"https://github.com/mistralai","1.3.6.1.4.1.57264.1.17":"132372032","1.3.6.1.4.1.57264.1.18":"https://github.com/mistralai/mistral-vibe/.github/workflows/release.yml@refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.19":"c96a6dbb34d34f8a868b3f67b279ecabbf1aa616","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/mistralai/mistral-vibe/actions/runs/41798273990/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"mistral_vibe-3.1.0-cp312-abi3-manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/84/72/32667291072a592f6160ed7fab3c6e809c4fb3e51c69aaf40ea651e50866/mistral_vibe-3.1.0-cp312-abi3-manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"e142459e-9524-5de8-86e8-894efc662257","path":"mistral_vibe-3.1.0.dist-info/sboms/mistralai-unified-harness.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e142459e-9524-5de8-86e8-894efc662257/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"mistralai/mistral-vibe","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/mistralai/mistral-vibe/.github/workflows/release.yml@refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.10":"c96a6dbb34d34f8a868b3f67b279ecabbf1aa616","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/mistralai/mistral-vibe","1.3.6.1.4.1.57264.1.13":"c96a6dbb34d34f8a868b3f67b279ecabbf1aa616","1.3.6.1.4.1.57264.1.14":"refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.15":"1112533539","1.3.6.1.4.1.57264.1.16":"https://github.com/mistralai","1.3.6.1.4.1.57264.1.17":"132372032","1.3.6.1.4.1.57264.1.18":"https://github.com/mistralai/mistral-vibe/.github/workflows/release.yml@refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.19":"c96a6dbb34d34f8a868b3f67b279ecabbf1aa616","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/mistralai/mistral-vibe/actions/runs/41798273990/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"mistral_vibe-3.1.0-cp312-abi3-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/97/69/4cc92fe98532638cf8fb1cfc4ee0a0142d7533ed1a0be5330b84081a19c2/mistral_vibe-3.1.0-cp312-abi3-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"4b01333f-25b9-5564-8183-e8ede70f0404","path":"mistral_vibe-3.1.0.dist-info/sboms/mistralai-unified-harness.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/4b01333f-25b9-5564-8183-e8ede70f0404/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"mistralai/mistral-vibe","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/mistralai/mistral-vibe/.github/workflows/release.yml@refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.10":"c96a6dbb34d34f8a868b3f67b279ecabbf1aa616","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/mistralai/mistral-vibe","1.3.6.1.4.1.57264.1.13":"c96a6dbb34d34f8a868b3f67b279ecabbf1aa616","1.3.6.1.4.1.57264.1.14":"refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.15":"1112533539","1.3.6.1.4.1.57264.1.16":"https://github.com/mistralai","1.3.6.1.4.1.57264.1.17":"132372032","1.3.6.1.4.1.57264.1.18":"https://github.com/mistralai/mistral-vibe/.github/workflows/release.yml@refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.19":"c96a6dbb34d34f8a868b3f67b279ecabbf1aa616","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/mistralai/mistral-vibe/actions/runs/41798273990/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"mistral_vibe-3.1.0-cp312-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/b0/82/3b39a8494328349a4e68b4d78e04ee8802ec4a34a1b23cd617019f65f2b8/mistral_vibe-3.1.0-cp312-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"ef6622c5-67a5-5962-bf7d-bd86ef14f6e6","path":"mistral_vibe-3.1.0.dist-info/sboms/mistralai-unified-harness.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ef6622c5-67a5-5962-bf7d-bd86ef14f6e6/download","vulnerability_count":7,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"mistralai/mistral-vibe","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/mistralai/mistral-vibe/.github/workflows/release.yml@refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.10":"c96a6dbb34d34f8a868b3f67b279ecabbf1aa616","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/mistralai/mistral-vibe","1.3.6.1.4.1.57264.1.13":"c96a6dbb34d34f8a868b3f67b279ecabbf1aa616","1.3.6.1.4.1.57264.1.14":"refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.15":"1112533539","1.3.6.1.4.1.57264.1.16":"https://github.com/mistralai","1.3.6.1.4.1.57264.1.17":"132372032","1.3.6.1.4.1.57264.1.18":"https://github.com/mistralai/mistral-vibe/.github/workflows/release.yml@refs/tags/v3.1.0","1.3.6.1.4.1.57264.1.19":"c96a6dbb34d34f8a868b3f67b279ecabbf1aa616","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/mistralai/mistral-vibe/actions/runs/41798273990/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":5,"has_attestation":true,"vulnerabilities":[{"id":"RUSTSEC-2026-0461","aliases":["GHSA-4432-vg92-fqh6"],"summary":"Unbounded tool schema cache in Streamable HTTP server transport","severity":"high","score":7.5,"package":"rmcp","version":"3.1.2","ecosystem":"crates.io","purl":"pkg:cargo/rmcp@3.1.2","fixed":["3.6.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0461","wheels":["mistral_vibe-3.1.0-cp312-abi3-macosx_11_0_arm64.whl","mistral_vibe-3.1.0-cp312-abi3-macosx_11_0_x86_64.whl","mistral_vibe-3.1.0-cp312-abi3-manylinux_2_28_aarch64.whl","mistral_vibe-3.1.0-cp312-abi3-manylinux_2_28_x86_64.whl","mistral_vibe-3.1.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0462","aliases":["GHSA-c9f9-cp8h-jcj5"],"summary":"Unbounded response body buffering in Streamable HTTP clients","severity":"medium","score":6.5,"package":"rmcp","version":"3.1.2","ecosystem":"crates.io","purl":"pkg:cargo/rmcp@3.1.2","fixed":["3.9.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0462","wheels":["mistral_vibe-3.1.0-cp312-abi3-macosx_11_0_arm64.whl","mistral_vibe-3.1.0-cp312-abi3-macosx_11_0_x86_64.whl","mistral_vibe-3.1.0-cp312-abi3-manylinux_2_28_aarch64.whl","mistral_vibe-3.1.0-cp312-abi3-manylinux_2_28_x86_64.whl","mistral_vibe-3.1.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2025-0141","aliases":[],"summary":"Bincode is unmaintained","severity":"unknown","score":null,"package":"bincode","version":"1.3.3","ecosystem":"crates.io","purl":"pkg:cargo/bincode@1.3.3","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0141","wheels":["mistral_vibe-3.1.0-cp312-abi3-macosx_11_0_arm64.whl","mistral_vibe-3.1.0-cp312-abi3-macosx_11_0_x86_64.whl","mistral_vibe-3.1.0-cp312-abi3-manylinux_2_28_aarch64.whl","mistral_vibe-3.1.0-cp312-abi3-manylinux_2_28_x86_64.whl","mistral_vibe-3.1.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["mistral_vibe-3.1.0-cp312-abi3-macosx_11_0_arm64.whl","mistral_vibe-3.1.0-cp312-abi3-macosx_11_0_x86_64.whl","mistral_vibe-3.1.0-cp312-abi3-manylinux_2_28_aarch64.whl","mistral_vibe-3.1.0-cp312-abi3-manylinux_2_28_x86_64.whl","mistral_vibe-3.1.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0457","aliases":["GHSA-5p52-q7pq-9fq2"],"summary":"OAuth client SSRF filter checks host strings, not resolved addresses","severity":"unknown","score":null,"package":"rmcp","version":"3.1.2","ecosystem":"crates.io","purl":"pkg:cargo/rmcp@3.1.2","fixed":["3.7.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0457","wheels":["mistral_vibe-3.1.0-cp312-abi3-macosx_11_0_arm64.whl","mistral_vibe-3.1.0-cp312-abi3-macosx_11_0_x86_64.whl","mistral_vibe-3.1.0-cp312-abi3-manylinux_2_28_aarch64.whl","mistral_vibe-3.1.0-cp312-abi3-manylinux_2_28_x86_64.whl","mistral_vibe-3.1.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0249","aliases":[],"summary":"smartstring is unmaintained","severity":"unknown","score":null,"package":"smartstring","version":"1.0.1","ecosystem":"crates.io","purl":"pkg:cargo/smartstring@1.0.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0249","wheels":["mistral_vibe-3.1.0-cp312-abi3-macosx_11_0_arm64.whl","mistral_vibe-3.1.0-cp312-abi3-macosx_11_0_x86_64.whl","mistral_vibe-3.1.0-cp312-abi3-manylinux_2_28_aarch64.whl","mistral_vibe-3.1.0-cp312-abi3-manylinux_2_28_x86_64.whl","mistral_vibe-3.1.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.53.1","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.53.1","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["mistral_vibe-3.1.0-cp312-abi3-macosx_11_0_arm64.whl","mistral_vibe-3.1.0-cp312-abi3-macosx_11_0_x86_64.whl","mistral_vibe-3.1.0-cp312-abi3-manylinux_2_28_aarch64.whl","mistral_vibe-3.1.0-cp312-abi3-manylinux_2_28_x86_64.whl","mistral_vibe-3.1.0-cp312-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":5,"total_sboms":5,"scanned_at":"2026-11-09","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":1,"unknown":5}}}