Vanna security advisories
4 advisories · none critical or high in 12 months · latest Mar 16
4 advisories
| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Mar 16 | Vanna has a SQL injection in the remove_training_data function CVE-2026-4229Medium7.3no fix yet | Medium7.3 | No fix yet |
| Jul 52024 | Vanna vulnerable to SQL Injection CVE-2024-5753High7.5no fix yet | High7.5 | No fix yet |
| Jun 272024 | vanna vulnerable to remote code execution caused by prompt injection CVE-2024-5826Critical9.8no fix yet | Critical9.8 | No fix yet |
| May 312024 | Vanna prompt injection code execution CVE-2024-5565Critical8.1no fix yet | Critical8.1 | No fix yet |