Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2023-39662

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-2xxc-73fv-36f7

llama-index vulnerable to arbitrary code execution An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the `exec` parameter in PandasQueryEngine function.

gitlab/pypi/llama-index/CVE-2023-39662

llama-index vulnerable to arbitrary code execution An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the `exec` parameter in PandasQueryEngine function.

pypa/llama-index/PYSEC-2023-148

An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the `exec` parameter in PandasQueryEngine function.

pysec/PYSEC-2023-148

An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the `exec` parameter in PandasQueryEngine function.