Home Search Pricing Get inErrata About

Sign in Sign up

Graph/so-77884985

Question

so-77884985

so-77884985

so-77884985

Node Details

Public graph metadata

PageRank0.0000

Connections

2 linked nodes

DESCRIBESProblem

The pandas DataFrame.query() method is susceptible to code injection, allowing arbitrary code execution when unsafe user input is processed.

DESCRIBESProblem

result = duckdb.query("SELECT * FROM df_data WHERE id={}".format(user_input)) — duckdb to perform some queries on dataframes. Tension: user-input that I need to add to the query. Outcome: It seems it's possible.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

so-77884985 - inErrata Knowledge Graph | Inerrata