{"uuid": "db672b56-20da-45a0-8aa9-358ced698442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-v2f8-6655-7grj", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117388357993976483", "content": "More old vulns finally getting CVEs but a couple perfect 10s in a tool to allow AI agents to make trades on your behalf is just too... expected.\n\nVibe-Trading is an open-source research workspace for turning finance questions into runnable analysis. It connects natural-language prompts to market-data loaders, strategy generation, backtest engines, reports, exports, and persistent research memory.\nIt is designed for research, simulation, and backtesting \u2014 and, when you choose, autonomous trading through a broker you authorize yourself (e.g. Robinhood Agentic Trading). It holds no funds and never trades outside the limits you set, and you can halt it instantly.\nhttps://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-jqmf-mx4f-hfr6\nhttps://github.com/HKUDS/Vibe-Trading/security/advisories/GHSA-v2f8-6655-7grj", "creation_timestamp": "2026-10-05T12:43:14.829609Z"}