CVE-2024-5826
2 advisories.
PyPI/vanna CVE-2024-5826: critical 9.8, EPSS 0.88%
vanna vulnerable to remote code execution caused by prompt injection
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.6.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-rrqq-fv6m-692m
- https://nvd.nist.gov/vuln/detail/CVE-2024-5826
- https://github.com/vanna-ai/vanna
- https://huntr.com/bounties/90620087-44ac-4e43-b659-3c5d30889369
CVE-2024-5826 · published · modified · JSON
PyPI/vanna CVE-2024-5826: critical 9.8, EPSS 0.88%
vanna vulnerable to remote code execution caused by prompt injection
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.6.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-562
- https://nvd.nist.gov/vuln/detail/CVE-2024-5826
- https://github.com/vanna-ai/vanna
- https://huntr.com/bounties/90620087-44ac-4e43-b659-3c5d30889369
- https://pypi.org/project/vanna
- https://github.com/advisories/GHSA-rrqq-fv6m-692m
CVE-2024-5826 · published · modified · JSON