Description
An issue in pandas-ai v.0.9.1 and before allows a remote attacker to execute arbitrary code via the _is_jailbreak function.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | pandasai | <= 0.8.1 | — | GHSA-8fp9-43pw-56vw |
Critical · 9.8
CVE-2023-39661
EUVD-2023-2245GHSA-8fp9-43pw-56vwPYSEC-2026-447
PandasAI vulnerable to arbitrary code execution
Published Aug 15, 2023 · Updated Oct 8, 2024 · Assigned by mitre