Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-93993
  • github.com/mistralai/mistral-vibe
 Mistral Vibe before 2.25.5 Remote Code Execution via git post-checkout 19 Sep
  • Fix available
  • Severity - 8.6 (High)
CVE-2026-67623
  • github.com/mistralai/mistral-vibe
 Mistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hook 05 Aug
  • Fix available
  • Severity - 8.6 (High)
MAL-2026-4354
  • PyPI/mistral-workflows-plugins-mistralai
 Malicious code in mistral-workflows-plugins-mistralai (PyPI) 26 May
  • No fix available
GHSA-jgg6-4rpr-wfh7
  • npm/@mistralai/mistralai
  • npm/@mistralai/mistralai-azure
  • npm/@mistralai/mistralai-gcp
 Broken dropper in @mistralai/mistralai, @mistralai/mistralai-azure, @mistralai/mistralai-gcp 18 May
  • No fix available
  • Severity - 0.0 (None)
GHSA-wx9m-wx4f-4cmg
  • PyPI/mistralai
 Malicious dropper in mistralai 2.4.6 PyPI package 18 May
  • No fix available
  • Severity - 9.6 (Critical)
MAL-2026-3608
  • PyPI/mistralai
 Malicious code in mistralai (PyPI) 12 May
  • No fix available
MAL-2026-3512
  • npm/@mistralai/mistralai-gcp
 Malicious code in @mistralai/mistralai-gcp (npm) 12 May
  • No fix available
MAL-2026-3511
  • npm/@mistralai/mistralai-azure
 Malicious code in @mistralai/mistralai-azure (npm) 12 May
  • No fix available
MAL-2026-3432
  • npm/@mistralai/mistralai
 Malicious code in @mistralai/mistralai (npm) 11 May
  • No fix available