PT-2025-12187

Name of the Vulnerable Software and Affected Versions Vanna-ai version 0.6.2 Description The issue arises from insufficient protection against injecting additional SQL commands from user requests. This occurs when the generate sql function calls extract sql with the LLM response. An attacker can...