Advisoriesby IbisPandasAIGHSA-w832-v3c6-m6rg
pandasai vulnerable to prompt injection
Fix: upgrade to 0.8.1 or later
An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| pandasai PyPI | < 0.8.1 | 0.8.1 |
Details and references
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-94
- Also known as
- CVE-2023-39660, PYSEC-2026-1757