vanna-ai/vanna Security Advisories | GitStock

medium2026-03-16

Vanna has a SQL injection in the remove_training_data function

GHSA-6mj8-jmp2-g8q7 · CVE-2026-4229

high2024-07-05

Vanna vulnerable to SQL Injection

GHSA-mwxm-35f8-6vg2 · CVE-2024-5753

critical2024-06-27

vanna vulnerable to remote code execution caused by prompt injection

GHSA-rrqq-fv6m-692m · CVE-2024-5826

critical2024-05-31

Vanna prompt injection code execution

GHSA-7735-w2jp-gvg6 · CVE-2024-5565