Directory Traversal

Overview vanna is a Generate SQL queries from natural language Affected versions of this package are vulnerable to Directory Traversal via the FileSystemConversationStore process. An attacker can write arbitrary JSON files and read sensitive metadata from unintended locations by submitting crafte...