TI-2026-04358 CVE-2026-4998 · GHSA-89r4-257g-hhwq
Sinaptik AI PandasAI Chat Message code_executor.py CodeExecutor.execute code injection
Priority MEDIUM 64
A weakness has been identified in Sinaptik AI PandasAI up to 3.0.0.
Vulnerabilities
4 records
TI-2026-04357 CVE-2026-4997 · GHSA-93x8-h4qh-r29w
Sinaptik AI PandasAI sql_sanitizer.py is_sql_query_safe path traversal
Priority HIGH 70
A security flaw has been discovered in Sinaptik AI PandasAI up to 3.0.0.
TI-2026-04356 CVE-2026-4996 · GHSA-xxrh-2f9r-39q6
Sinaptik AI PandasAI pandasai-lancedb Extension lancedb.py get_relevant_docs_by_id sql injection
Priority HIGH 70
A vulnerability was identified in Sinaptik AI PandasAI up to 0.1.4.
TI-2024-11472 CVE-2024-12366 · GHSA-vv2h-2w3q-3fx7
Code injection in Sinaptik AI PandasAI
Priority MEDIUM 51
PandasAI uses an interactive prompt function that is vulnerable to prompt injection and run arbitrary Python code that can lead to Remote Code Execution (RCE) instead of the intended explanation of the natural language p…