{"data":{"ecosystem":"pypi","name":"vanna","url":"https://aisecwatch.com/packages/pypi/vanna","latestVersion":"2.0.2","firstReleaseAt":"2023-05-13T19:29:38.578Z","repository":"https://github.com/vanna-ai/vanna/issues","llm":{"exposure":"direct","depth":0,"integratedAt":"2023-08-31T04:10:57.984Z","integratedVersion":"0.0.22","sdks":["anthropic","chromadb","faiss","google-genai","huggingface","langchain","milvus","mistralai","ollama","openai","pinecone","qdrant","vertexai","weaviate"],"path":[]},"authority":{"profile":["http"],"fromDependencies":["pypi:httpx","pypi:requests"]},"dependencies":[{"ecosystem":"pypi","name":"anthropic","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"chromadb","versionSpec":">=1.1.0","scope":"extra:all"},{"ecosystem":"pypi","name":"faiss-cpu","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"faiss-gpu","versionSpec":null,"scope":"extra:faiss-gpu"},{"ecosystem":"pypi","name":"fastembed","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"google-cloud-aiplatform","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"google-genai","versionSpec":null,"scope":"extra:gemini"},{"ecosystem":"pypi","name":"google-generativeai","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"langchain-community","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"langchain-core","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"langchain-huggingface","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"langchain-postgres","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"mistralai","versionSpec":">=1.0.0","scope":"extra:all"},{"ecosystem":"pypi","name":"ollama","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"openai","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"pinecone","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"pymilvus","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"qdrant-client","versionSpec":">=1.0.0","scope":"extra:all"},{"ecosystem":"pypi","name":"qianfan","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"transformers","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"vllm","versionSpec":null,"scope":"extra:vllm"},{"ecosystem":"pypi","name":"weaviate-client","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"azure-common","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"azure-identity","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"azure-search-documents","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"boto","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"boto3","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"botocore","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"click","versionSpec":">=8.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"clickhouse-connect","versionSpec":null,"scope":"extra:clickhouse"},{"ecosystem":"pypi","name":"db-dtypes","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"duckdb","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"fastapi","versionSpec":">=0.68.0","scope":"extra:fastapi"},{"ecosystem":"pypi","name":"flask","versionSpec":">=2.0.0","scope":"extra:flask"},{"ecosystem":"pypi","name":"flask-cors","versionSpec":">=4.0.0","scope":"extra:flask"},{"ecosystem":"pypi","name":"google-cloud-bigquery","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"httpx","versionSpec":">=0.28.0","scope":"runtime"},{"ecosystem":"pypi","name":"marqo","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"mypy","versionSpec":null,"scope":"extra:dev"},{"ecosystem":"pypi","name":"opensearch-dsl","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"opensearch-py","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"oracledb","versionSpec":null,"scope":"extra:oracle"},{"ecosystem":"pypi","name":"pandas","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"pandas-stubs","versionSpec":null,"scope":"extra:dev"},{"ecosystem":"pypi","name":"plotly","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"plotly-stubs","versionSpec":null,"scope":"extra:dev"},{"ecosystem":"pypi","name":"psycopg2-binary","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"pydantic","versionSpec":">=2.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"pyhive","versionSpec":null,"scope":"extra:hive"},{"ecosystem":"pypi","name":"pymysql","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"pyodbc","versionSpec":null,"scope":"extra:mssql"},{"ecosystem":"pypi","name":"pytest","versionSpec":">=7.0.0","scope":"extra:dev"},{"ecosystem":"pypi","name":"pytest-asyncio","versionSpec":">=0.21.0","scope":"extra:dev"},{"ecosystem":"pypi","name":"pytest-cov","versionSpec":">=4.0.0","scope":"extra:dev"},{"ecosystem":"pypi","name":"pytest-mock","versionSpec":">=3.10.0","scope":"extra:dev"},{"ecosystem":"pypi","name":"pyyaml","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"requests","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"ruff","versionSpec":null,"scope":"extra:dev"},{"ecosystem":"pypi","name":"snowflake-connector-python","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"sqlalchemy","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"sqlparse","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"tabulate","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"thrift","versionSpec":null,"scope":"extra:hive"},{"ecosystem":"pypi","name":"tox","versionSpec":">=4.0.0","scope":"extra:dev"},{"ecosystem":"pypi","name":"types-pyyaml","versionSpec":null,"scope":"extra:dev"},{"ecosystem":"pypi","name":"types-requests","versionSpec":null,"scope":"extra:dev"},{"ecosystem":"pypi","name":"types-tabulate","versionSpec":null,"scope":"extra:dev"},{"ecosystem":"pypi","name":"uvicorn","versionSpec":">=0.15.0","scope":"extra:fastapi"},{"ecosystem":"pypi","name":"xinference-client","versionSpec":null,"scope":"extra:all"},{"ecosystem":"pypi","name":"zhipuai","versionSpec":null,"scope":"extra:all"}],"advisories":[{"id":"64421ae2-c542-4ef3-8ed5-9823b8b6d04f","url":"https://aisecwatch.com/issues/64421ae2-c542-4ef3-8ed5-9823b8b6d04f","cveId":"CVE-2024-5826","title":"CVE-2024-5826: In the latest version of vanna-ai/vanna, the `vanna.ask` function is vulnerable to remote code execution due to prompt…","headline":"vanna-ai/vanna remote code execution through prompt injection in vanna.ask","severity":"critical","publishedAt":"2024-06-27T19:15:17.350Z","affected":["vanna@<= 0.6.2"],"epssScore":0.00882,"matchedBy":"ecosystem"},{"id":"c5d51efc-f8ef-4999-b0d4-e3a8ffbfe179","url":"https://aisecwatch.com/issues/c5d51efc-f8ef-4999-b0d4-e3a8ffbfe179","cveId":"CVE-2024-5565","title":"CVE-2024-5565: The Vanna library uses a prompt function to present the user with visualized results, it is possible to alter the…","headline":"Vanna prompt injection leads to remote code execution via ask method","severity":"high","publishedAt":"2024-05-31T15:15:09.673Z","affected":["vanna@<= 0.5.5"],"epssScore":0.15178,"matchedBy":"ecosystem"}],"checkedAt":"2026-10-09T21:55:19.630Z"},"meta":{"advisoryMatching":"by package name and ecosystem; an advisory with no ecosystem recorded for the package is matched by name alone"}}