tangledgroup/pandasai-sandbox-exploit

pandasai-sandbox-exploit

pandasai-sandbox-exploit

Download in local directory Mistral-based models for llama.cpp:

1. speechless-code-mistral-7B-v1.0-GGUF https://huggingface.co/TheBloke/speechless-code-mistral-7B-v1.0-GGUF/blob/main/speechless-code-mistral-7b-v1.0.Q5_K_M.gguf

2. Mistral-7B-v0.1-GGUF https://huggingface.co/TheBloke/Mistral-7B-v0.1-GGUF/blob/main/mistral-7b-v0.1.Q5_K_M.gguf

python3.11 -m venv venv
source venv/bin/activate
pip install -r requirements.txt --force-reinstall --upgrade --no-cache-dir

References

• PandasAI
• llama.cpp
• Tangled Group, Inc
• https://security.snyk.io/vuln/SNYK-PYTHON-PANDASAI-5848027
• Sinaptik-AI/pandas-ai#399
• https://github.com/gventuri/pandas-ai/pull/409/commits/6656d846f045a3d6a55b0c57e8d69a958670f863
• https://github.com/gventuri/pandas-ai/blob/f9facf383b6aff8e92065720a4719c5de11dc696/pandasai/constants.py#L87C6-L87C11
• https://github.com/scipy/scipy/blob/8a130d34ed741995b2d98196e5ff24969e8d5ca1/scipy/io/arff/_arffread.py#L8