GitHub Advisoryadvisory · PyPI

GHSA-w832-v3c6-m6rg pandasai vulnerable to prompt injection

HIGH Published 2023-08-21 Modified 2023-08-21 Official page ↗
Aliases
CVE-2023-39660
Ecosystem
PyPI
Packages
pandasai
Severity
High
Weaknesses
CWE-94
Reviewed
2023-08-21

Affected packages

• PyPI pandasai: < 0.8.1 → fixed in 0.8.1

Description

An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function.

Related

Alias · CVE (1)

  • CVE-2023-39660 An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the… vulnerability

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References