gventuri/pandas-ai · Security
pandasai vulnerable to prompt injection
- GHSA ID
- GHSA-w832-v3c6-m6rg
- CVE ID
- CVE-2023-39660
- Severity
- high
- Published
- Updated
Description
An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function.
CWEs
- CWE-94 · Improper Control of Generation of Code ('Code Injection')