CyberSecBulletin

Gabrieleventuri vulnerabilities

We track 2 vulnerabilities in Gabrieleventuri products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 22, 2024.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Gabrieleventuri vulnerabilities

  • 9.8 Critical severity

    Pandasai: Missing Authorization

    CVE-2024-23752GabrieleventuriEPSS 1.01%

    GenerateSDFPipeline in synthetic_dataframe in PandasAI (aka pandas-ai) through 1.5.17 allows attackers to trigger the generation of arbitrary Python code that is executed by SDFCodeExecutor. An attacker can create a dataframe that provides an English language

  • 9.8 Critical severity

    Pandasai: Improper Control of Generation of Code

    CVE-2023-39660GabrieleventuriEPSS 1.53%

    An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function.