AdvisoriesToolsStatsChecklistSubmitGet the email
Submit

Seen a hole we missed?

Know about a security issue affecting apps built with an AI builder, coding agent, MCP server or model? We add entries only when they are backed by a public source (CVE, vendor advisory, research write-up, or reputable reporting).

Do not submit unpatched vulnerabilities in someone else’s live app. Report those privately to the app owner or vendor first. Spotted a mistake in an entry? Pick “Correction” below.

01.
What is it?
02.
03.
04.

At least one https:// link. We don’t publish anything we can’t cite.

05.
06.
07.

We read every submission. Your email is never shown or shared. VibeVulns is an open, community-run record, so accepted entries are public for everyone.