CVE-2026-51911

vanna v2.0.2 contains a code injection vulnerability in VannaBase.getplotlyfigure src/vanna/legacy/base/base.py. Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution...

EUVD-2026-91760

vanna v2.0.2 contains a code injection vulnerability in VannaBase.getplotlyfigure src/vanna/legacy/base/base.py. Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution...

CVE-2026-51911

The software vanna v2.0.2 is vulnerable to a code injection vulnerability within the VannaBase.get_plotly_figure function, located in src/vanna/legacy/base/base.py. An attacker who can access an exposed entry may trigger the execution of attacker-controlled code or commands . While the documents ...