vanna Code Injection Vulnerability

Vanna is a personalized AI SQL agent from Vanna. vanna suffers from a code injection vulnerability that stems from a lack of sandboxing for executing LLM-generated code, which allows an attacker to manipulate the exec function in src/vanna/base/base.py, which can be exploited by an attacker to...

PT-2024-37119

Name of the Vulnerable Software and Affected Versions: BerriAI/litellm version v1.35.8 Description: The issue allows an attacker to achieve remote code execution. It exists in the add deployment function, which decodes and decrypts environment variables from base64 and assigns them to os.environ...

MAL-2024-6448 Malicious code in active_model-email-validator (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in active_model-email-validator (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in active-model_version_serializers (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6423 Malicious code in active-model_version_serializers (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in active-model_validates_intersection_of (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in active-model_validators_ex (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6422 Malicious code in active-model_validators_ex (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6420 Malicious code in active-model_type_validator (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in active-model_type_validator (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in active-model_serializers_validator (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6416 Malicious code in active-model_serializers_cancancan (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in active-model_serializers_cancancan (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in active-model_serializers_matchers (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in active-model_serializers-matchers (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in active-model_serializers_binary (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in active-model_serializers-jsonapi_embedded_records_deserializer (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in active-model_serializers-hash_wrapper (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in active-model_serializers-cancan (RubyGems)

--- -= Per source details. Do not edit below this line.=-...