Beveiligingsadvies

CVE-2026-51911

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-10-02 00:00:00
Laatst bijgewerkt 2026-10-05 18:43:09
Toegewezen door mitre
CVSS-score 9.8
Status PUBLISHED

Beschrijving

vanna v2.0.2 contains a code injection vulnerability in VannaBase.get_plotly_figure (src/vanna/legacy/base/base.py). Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution.