squadds (>=0.0.0, <=0.0.3) potentially affected by CVE-2024-12366 via pandasai (1.5.11)

pandasai PYPI version 1.5.11 is affected by a known vulnerability. The following packages have a transitive dependency on pandasai and may be impacted: - squadds =0.0.0, =0.0.3 Source cves: CVE-2024-12366 Source advisory: OSV:PYSEC-2026-448...

exposeq (>=4.1.3, <=4.6.1) potentially affected by CVE-2024-12366 via pandasai (1.3.3)

pandasai PYPI version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on pandasai and may be impacted: - exposeq =4.1.3, =4.6.1 Source cves: CVE-2024-12366 Source advisory: OSV:PYSEC-2026-448...

CVE-2024-12366

PandasAI uses an interactive prompt function that is vulnerable to prompt injection and run arbitrary Python code that can lead to Remote Code Execution RCE instead of the intended explanation of the natural language processing by the LLM...

exposeq (>=4.1.3, <=4.6.1) potentially affected by CVE-2024-12366 via pandasai (1.3.3)

pandasai PYPI version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on pandasai and may be impacted: - exposeq =4.1.3, =4.6.1 Source cves: CVE-2024-12366 Source advisory: OSV:GHSA-VV2H-2W3Q-3FX7...

squadds (>=0.0.0, <=0.0.3) potentially affected by CVE-2024-12366 via pandasai (1.5.11)

pandasai PYPI version 1.5.11 is affected by a known vulnerability. The following packages have a transitive dependency on pandasai and may be impacted: - squadds =0.0.0, =0.0.3 Source cves: CVE-2024-12366 Source advisory: OSV:GHSA-VV2H-2W3Q-3FX7...

CVE-2024-12366 CVE-2024-12366

PandasAI uses an interactive prompt function that is vulnerable to prompt injection and run arbitrary Python code that can lead to Remote Code Execution RCE instead of the intended explanation of the natural language processing by the LLM...

CVE-2024-12366 CVE-2024-12366

PandasAI uses an interactive prompt function that is vulnerable to prompt injection and run arbitrary Python code that can lead to Remote Code Execution RCE instead of the intended explanation of the natural language processing by the LLM...

CVE-2024-12366

The PandasAI Python library (versions 2.4.3 and earlier ) contains a vulnerability in its interactive prompt function that allows for prompt injection . Due to insufficient input validation, attackers can manipulate the system into executing untrusted arbitrary Python code instead of processing n...