HIGH7.5PyPI
PYSEC-2026-2002· CVE-2024-5753, GHSA-mwxm-35f8-6vg2Vanna vulnerable to SQL Injection
Modified: 7/7/2026
package
PyPI/vanna
pkg:pypi/vanna
HIGH7.3PyPI
PYSEC-2026-3397· CVE-2026-4229, GHSA-6mj8-jmp2-g8q7Vanna has a SQL injection in the remove_training_data function
Modified: 7/13/2026
HIGH8.1PyPI
PYSEC-2026-561· CVE-2024-5565, GHSA-7735-w2jp-gvg6Vanna prompt injection code execution
Modified: 7/1/2026
CRITICAL9.8PyPI
PYSEC-2026-562· CVE-2024-5826, GHSA-rrqq-fv6m-692mvanna vulnerable to remote code execution caused by prompt injection
Modified: 7/1/2026
HIGH7.3PyPI
GHSA-6mj8-jmp2-g8q7· CVE-2026-4229, PYSEC-2026-3397Vanna has a SQL injection in the remove_training_data function
Modified: 7/13/2026
HIGH8.1PyPI
GHSA-7735-w2jp-gvg6· CVE-2024-5565, PYSEC-2026-561Vanna prompt injection code execution
Modified: 6/29/2026
HIGH7.5PyPI
GHSA-mwxm-35f8-6vg2· CVE-2024-5753, PYSEC-2026-2002Vanna vulnerable to SQL Injection
Modified: 7/7/2026
CRITICAL9.8PyPI
GHSA-rrqq-fv6m-692m· CVE-2024-5826, PYSEC-2026-562vanna vulnerable to remote code execution caused by prompt injection
Modified: 6/29/2026