VulnBump: Can AI Agents Fix Vulnerable Dependencies Without Breaking the Build?

VulnBump tests AI agents on 307 real dependency upgrades. A fix counts only if the vulnerability is gone and the build and tests stay green.