What’s Vulnerable › Products

vanna-ai/vanna vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your vanna-ai/vanna version is affected

Latest vanna-ai/vanna vulnerabilities

• CVE-2024-8099 — Server-Side Request Forgery (SSRF) in vanna-ai/vanna (CVSS 8.3)
• CVE-2024-8055 — Local File Read (LFI) by Prompt Injection via SnowFlake SQL in vanna-ai/vanna (CVSS 7.5)
• CVE-2024-7764 — SQL Injection in vanna-ai/vanna (CVSS 8.1)
• CVE-2024-6841 — CSRF in vanna-ai/vanna (CVSS 6.5)