Lucene search
+L

1 matches found

PyPA
PyPA
added 2026/07/13 2:36 p.m.21 views

Vanna has a SQL injection in the remove_training_data function

A flaw has been found in vanna-ai vanna up to 2.0.2. This impacts the function removetrainingdata of the file src/vanna/legacy/google/bigqueryvector.py. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

7.5CVSS6.7AI score0.00254EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder