vanna-ai vanna

• CVE-2026-65702 High 8.6 Vanna 2.0.2 Path Traversal via FileSystemConversationStore 0.6%
• CVE-2026-6977 High 7.3 vanna-ai vanna Legacy Flask API improper authorization 0.3%
• CVE-2026-5321 Medium 4.3 vanna-ai vanna FastAPI/Flask Server cross-domain policy 0.2%
• CVE-2026-5320 High 7.3 vanna-ai vanna Chat API Endpoint v2 missing authentication 0.4%
• CVE-2026-4513 Medium 6.3 vanna-ai vanna base.py ask sql injection 0.2%
• CVE-2026-4511 Medium 6.3 vanna-ai vanna legacy exec injection 0.2%
• CVE-2026-4231 High 7.3 vanna-ai vanna Endpoint __init__.py run_sql server-side request forgery 0.3%
• CVE-2026-4230 Medium 6.3 vanna-ai vanna Endpoint __init__.py update_sql sql injection 0.2%
• CVE-2026-4229 High 7.3 vanna-ai vanna bigquery_vector.py remove_training_data sql injection 0.3%