EUVD-2025-6951

Malicious code in bioql PyPI...

CVE-2024-7764: Improper Neutralization of Special Elements used in an SQL Command

Vanna-ai v0.6.2 is vulnerable to SQL Injection due to insufficient protection against injecting additional SQL commands from user requests. The vulnerability occurs when the generatesql function calls extractsql with the LLM response. An attacker can include a semi-colon between a search data fie...