CVE-2026-4229
2 advisories.
PyPI/vanna CVE-2026-4229: high 7.3
Vanna has a SQL injection in the remove_training_data function
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.0.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-6mj8-jmp2-g8q7
- https://nvd.nist.gov/vuln/detail/CVE-2026-4229
- https://gist.github.com/YLChen-007/b4f326eaecc29b192cf93dc5d6bc0623
- https://github.com/vanna-ai/vanna
- https://vuldb.com/?ctiid.351152
- https://vuldb.com/?id.351152
- https://vuldb.com/?submit.771214
CVE-2026-4229 · published · modified · JSON
PyPI/vanna CVE-2026-4229: high 7.3
Vanna has a SQL injection in the remove_training_data function
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.0.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-3397
- https://nvd.nist.gov/vuln/detail/CVE-2026-4229
- https://gist.github.com/YLChen-007/b4f326eaecc29b192cf93dc5d6bc0623
- https://github.com/vanna-ai/vanna
- https://vuldb.com/?ctiid.351152
- https://vuldb.com/?id.351152
- https://vuldb.com/?submit.771214
- https://pypi.org/project/vanna
- https://github.com/advisories/GHSA-6mj8-jmp2-g8q7
CVE-2026-4229 · published · modified · JSON