Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/16 3:30 p.m.10 views

GHSA-6MJ8-JMP2-G8Q7 Vanna has a SQL injection in the remove_training_data function

A flaw has been found in vanna-ai vanna up to 2.0.2. This impacts the function removetrainingdata of the file src/vanna/legacy/google/bigqueryvector.py. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

7.3CVSS5.7AI score0.00254EPSS
SaveExploits0References6
Rows per page
Query Builder