Low
osv
·
PYSEC-2023-148
PYSEC-2023-148
Published Aug 15, 2023
CVSS 3.1
An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the exec parameter in PandasQueryEngine function.
Affected AI Products
llama-index