vanna-ai Vanna Vulnerabilities

Vanna-ai Vanna vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

16 March 2026

Server-Side Request Forgery Vulnerability in vanna-ai Endpoint
CVE-2026-4231
Vanna-aiVanna👾🟡6.9MEDIUM
SQL Injection Vulnerability in vanna-ai's Vanna Product
CVE-2026-4230
Vanna-aiVanna👾🟡5.3MEDIUM
SQL Injection Vulnerability in Vanna-AI's Data Removal Function
CVE-2026-4229
Vanna-aiVanna👾🟡6.9MEDIUM

20 March 2025

SQL Injection Vulnerability in Vanna-ai by the Vendor
CVE-2024-7764
Vanna-aiVanna-ai/vanna8.1HIGH
SQL Injection Vulnerability in Vanna Application by Vanna Software
CVE-2024-8055
Vanna-aiVanna-ai/vanna7.5HIGH
Cross-Site Request Forgery Vulnerability in Vanna Web App by Vanna AI
CVE-2024-6841
Vanna-aiVanna-ai/vanna6.5MEDIUM
Server-Side Request Forgery Vulnerability in Vanna by vanna-ai
CVE-2024-8099
Vanna-aiVanna-ai/vanna8.3HIGH

5 July 2024

Vanna-ai vulnerable to SQL injection, allowing unauthenticated remote users to read arbitrary local files
CVE-2024-5753
Vanna-aiVanna-ai/vanna7.5HIGH

28 June 2024

Vanna v0.3.4 vulnerable to SQL injection in Flask Web APIs
CVE-2024-5827
Vanna-aiVanna-ai/vannaEPSS 39%9.8CRITICAL

27 June 2024

Remote Code Execution via Prompt Injection in vanna-ai/vanna
CVE-2024-5826
Vanna-aiVanna-ai/vanna9.8CRITICAL