Lucene search
+L

1 matches found

PyPA
PyPA
•added 2026/07/13 2:36 p.m.•28 views

Vanna has a SQL injection in the remove_training_data function

A flaw has been found in vanna-ai vanna up to 2.0.2. This impacts the function removetrainingdata of the file src/vanna/legacy/google/bigqueryvector.py. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

7.5CVSS7AI score0.00427EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder