CVE-2023-39662

Description

An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the `exec` parameter in PandasQueryEngine function.

Related CPE's

References

https://github.com/jerryjliu/llama_index/issues/7054

CvssV3 impact

CvssV2 impact