AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

Vanna security advisories

4 advisories · none critical or high in 12 months · latest Mar 16

Repository

4 advisories

Medium 7.3Mar 16Vanna has a SQL injection in the remove_training_data functionCVE-2026-4229no fix yetHigh 7.5Jul 5, 2024Vanna vulnerable to SQL InjectionCVE-2024-5753no fix yetCritical 9.8Jun 27, 2024vanna vulnerable to remote code execution caused by prompt injectionCVE-2024-5826no fix yetCritical 8.1May 31, 2024Vanna prompt injection code executionCVE-2024-5565no fix yet
About Vanna

Text-to-SQL with retrieval.

Packages watched: vanna (PyPI).

vanna-ai/vanna