PandasAI vulnerable to arbitrary code execution

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-39661 · ADVISORY
• gventuri/pandas-ai · WEB
• gventuri/pandas-ai · PACKAGE
• pypi.org/project/pandasai · PACKAGE
• GitHub Advisory GHSA-8fp9-43pw-56vw · ADVISORY

pandasai のその他の脆弱性

• CVE-2024-12366緊急 9.8PandasAI uses an interactive prompt function that is vulnerable to prompt injection and run arbitrary Python code that can lead to Remote Co…
• CVE-2024-23752緊急 9.8GenerateSDFPipeline in synthetic_dataframe in PandasAI (aka pandas-ai) through 1.5.17 allows attackers to trigger the generation of arbitrar…
• CVE-2023-39660緊急 9.8An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the pr…