Homepage

vanna@0.7.6

Generate SQL queries from natural language

  • latest version

    2.0.2

  • first published

    3 years ago

  • latest version published

    7 months ago

  • licenses detected

  • View vanna package health on Snyk  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the vanna package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Directory Traversal

    vanna is a Generate SQL queries from natural language

    Affected versions of this package are vulnerable to Directory Traversal via the FileSystemConversationStore process. An attacker can write arbitrary JSON files and read sensitive metadata from unintended locations by submitting crafted path traversal sequences in the conversation_id parameter to unauthenticated chat API endpoints.

    How to fix Directory Traversal?

    There is no fixed version for vanna.

    [0,)
    • M
    Permissive Cross-domain Policy with Untrusted Domains

    vanna is a Generate SQL queries from natural language

    Affected versions of this package are vulnerable to Permissive Cross-domain Policy with Untrusted Domains via CORS misconfiguration in the FastAPI/Flask server components. An attacker can cause unauthorized cross-domain requests by manipulating cross-origin resource sharing headers remotely.

    How to fix Permissive Cross-domain Policy with Untrusted Domains?

    There is no fixed version for vanna.

    [0,)
    • M
    Missing Authentication for Critical Function

    vanna is a Generate SQL queries from natural language

    Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the /api/vanna/v2/chat_poll, /api/vanna/v2/chat_sse, and /api/vanna/v2/chat_websocket endpoints. An attacker can gain unauthorized access and potentially retrieve, modify, or delete data by sending crafted requests to the affected endpoint.

    How to fix Missing Authentication for Critical Function?

    There is no fixed version for vanna.

    [0,)
    • M
    SQL Injection

    vanna is a Generate SQL queries from natural language

    Affected versions of this package are vulnerable to SQL Injection via the ask function in the file vanna\legacy\base\base.py. An attacker can execute unauthorized SQL commands by supplying crafted input to the function.

    How to fix SQL Injection?

    There is no fixed version for vanna.

    [0,)
    • M
    Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

    vanna is a Generate SQL queries from natural language

    Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') via the exec function in the /src/vanna/legacy file. An attacker can execute arbitrary commands by supplying crafted input remotely.

    How to fix Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')?

    There is no fixed version for vanna.

    [0,)
    • M
    SQL Injection

    vanna is a Generate SQL queries from natural language

    Affected versions of this package are vulnerable to SQL Injection via the remove_training_data function in the file bigquery_vector.py. An attacker can execute arbitrary SQL commands by supplying crafted input to the ID argument.

    How to fix SQL Injection?

    There is no fixed version for vanna.

    [0,)
    • M
    Server-side Request Forgery (SSRF)

    vanna is a Generate SQL queries from natural language

    Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) via the run_sql function. An attacker can access internal resources or services by sending crafted requests remotely.

    How to fix Server-side Request Forgery (SSRF)?

    There is no fixed version for vanna.

    [0,)
    • M
    SQL Injection

    vanna is a Generate SQL queries from natural language

    Affected versions of this package are vulnerable to SQL Injection via the update_sql function. An attacker can execute arbitrary SQL commands by supplying crafted input remotely.

    How to fix SQL Injection?

    There is no fixed version for vanna.

    [0,)
    • M
    Cross-site Request Forgery (CSRF)

    vanna is a Generate SQL queries from natural language

    Affected versions of this package are vulnerable to Cross-site Request Forgery (CSRF) in the run_sql() function, accessible via the /api/v0/run_sql endpoint. An attacker can alter or delete (but not read) data by sending requests that include SQL commands, when the endpoint is not meant to be exposed.

    How to fix Cross-site Request Forgery (CSRF)?

    There is no fixed version for vanna.

    [0,)
    • H
    SQL Injection

    vanna is a Generate SQL queries from natural language

    Affected versions of this package are vulnerable to SQL Injection by injecting a series of PUT and COPY statements as raw SQL using the "Manually Fix" feature in the Snowflake database integration. The run_sql_snowflake() function will execute those statements on the database without sanitization. An attacker can exploit this to read arbitrary local files on the server.

    How to fix SQL Injection?

    There is no fixed version for vanna.

    [0,)
    • M
    SQL Injection

    vanna is a Generate SQL queries from natural language

    Affected versions of this package are vulnerable to SQL Injection through the pg_read_file function. An attacker can read arbitrary local files on the server by exploiting exposed SQL queries.

    Note

    By default pg_read_file() is restricted to superusers, but other users can be granted the EXECUTE permission to run this function.

    How to fix SQL Injection?

    There is no fixed version for vanna.

    [0,)
    • M
    SQL Injection

    vanna is a Generate SQL queries from natural language

    Affected versions of this package are vulnerable to SQL Injection through the integration of DuckDB with Flask Web APIs. An attacker can manipulate SQL training data to generate queries that write arbitrary files on the victim's system, potentially leading to unauthorized command execution or the creation of backdoors.

    How to fix SQL Injection?

    There is no fixed version for vanna.

    [0,)
    • C
    Code Injection

    vanna is a Generate SQL queries from natural language

    Affected versions of this package are vulnerable to Code Injection via the src/vanna/base/base.py file, where function exec execute the plotly_code which is generated by LLM in function generate_plotly_code. An attacker can achieve RCE on the app backend server via prompt injection and gain the full control of the server.

    How to fix Code Injection?

    There is no fixed version for vanna.

    [0,)
    • H
    Improper Input Validation

    vanna is a Generate SQL queries from natural language

    Affected versions of this package are vulnerable to Improper Input Validation allowing prompt injection via the ask method with the visualize parameter set to True. An attacker can execute arbitrary code by injecting malicious input into the prompt function. This is only exploitable if the visualize parameter is enabled, which is the default setting.

    How to fix Improper Input Validation?

    There is no fixed version for vanna.

    [0,)
    Go back to all versions of this package