Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/16 3:30 p.m.13 views

Vanna has a SQL injection in the remove_training_data function

A flaw has been found in vanna-ai vanna up to 2.0.2. This impacts the function removetrainingdata of the file src/vanna/legacy/google/bigqueryvector.py. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

7.5CVSS5.6AI score0.00254EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder