CVE database · Agent frameworks and SDKs
Vanna vulnerabilities and CVEs
The Beam CVE database tracks 4 security advisories for Vanna: 2 critical, 1 high and 1 medium severity. The newest is CVE-2026-4229, published Mar 16, 2026.
A library that turns natural-language questions into SQL and runs it.
Check your version: pip show vanna
- Vulnerabilities tracked
- 4
- Critical
- 2
- Known exploited (CISA KEV)
- 0
- Published in the last 30 days
- 0
All entries, newest first
CVE-2026-4229
Vanna has a SQL injection in the remove_training_data function
medium7.3No fixMar 16, 2026CVE-2024-5753
Vanna vulnerable to SQL Injection
high7.5No fixJul 5, 2024CVE-2024-5826
vanna vulnerable to remote code execution caused by prompt injection
critical9.8No fixJun 27, 2024CVE-2024-5565
Vanna prompt injection code execution
critical8.1No fixMay 31, 2024