Vulnerabilities

TI-2026-23484 CVE-2026-30273 · GHSA-9cxr-vwm6-6vmr

pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the…

LOW 37

pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base._execute_sql_query component.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00191 Published 2026-04-01 No fix listed CWE-89

TI-2024-15755 CVE-2024-23752 · GHSA-5g73-69p4-7gvx

GenerateSDFPipeline in synthetic_dataframe in PandasAI (aka pandas-ai) through 1.5.17…

HIGH 82

GenerateSDFPipeline in synthetic_dataframe in PandasAI (aka pandas-ai) through 1.5.17 allows attackers to trigger the generation of arbitrary Python code that is executed by SDFCodeExecutor.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01015 Published 2024-01-22 No fix listed CWE-862

TI-2023-20725 CVE-2023-39660 · GHSA-w832-v3c6-m6rg

An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to…

HIGH 82

An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01534 Published 2023-08-21 Fixed in 0.8.1 CWE-94

TI-2023-20726 CVE-2023-39661 · GHSA-8fp9-43pw-56vw

An issue in pandas-ai v.0.9.1 and before allows a remote attacker to execute arbitrary…

HIGH 82

An issue in pandas-ai v.0.9.1 and before allows a remote attacker to execute arbitrary code via the _is_jailbreak function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01417 Published 2023-08-15 No fix listed CWE-74

Vulnerabilities

Filters

pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the…

GenerateSDFPipeline in synthetic_dataframe in PandasAI (aka pandas-ai) through 1.5.17…

An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to…

An issue in pandas-ai v.0.9.1 and before allows a remote attacker to execute arbitrary…