Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-3397
  • PyPI/vanna
 Vanna has a SQL injection in the remove_training_data function 13 Jul
  • No fix available
  • Severity - 5.5 (Medium)
PYSEC-2026-2002
  • PyPI/vanna
 Vanna vulnerable to SQL Injection 07 Jul
  • No fix available
  • Severity - 8.7 (High)
PYSEC-2026-562
  • PyPI/vanna
 vanna vulnerable to remote code execution caused by prompt injection 29 Jun
  • No fix available
  • Severity - 9.8 (Critical)
PYSEC-2026-561
  • PyPI/vanna
 Vanna prompt injection code execution 29 Jun
  • No fix available
  • Severity - 9.2 (Critical)
GHSA-6mj8-jmp2-g8q7
  • PyPI/vanna
 Vanna has a SQL injection in the remove_training_data function 16 Mar
  • No fix available
  • Severity - 5.5 (Medium)
GHSA-mwxm-35f8-6vg2
  • PyPI/vanna
 Vanna vulnerable to SQL Injection 05 Jul 2024
  • No fix available
  • Severity - 8.7 (High)
GHSA-rrqq-fv6m-692m
  • PyPI/vanna
 vanna vulnerable to remote code execution caused by prompt injection 27 Jun 2024
  • No fix available
  • Severity - 9.8 (Critical)
GHSA-7735-w2jp-gvg6
  • PyPI/vanna
 Vanna prompt injection code execution 31 May 2024
  • No fix available
  • Severity - 9.2 (Critical)