An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the exec parameter in PandasQueryEngine function.
| Software | From | Fixed in |
|---|---|---|
| llamaindex_project / llamaindex | - | 0.7.13.x |
llama-index
|
- | 0.9.14 |