10 matches found
CVE-2026-51898
sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute...
PT-2026-104362
Name of the Vulnerable Software and Affected Versions pandas-ai version 3.0.0 Description The software is subject to code injection within the CodeExecutor.execute function. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
EUVD-2026-91705
sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute...
CVE-2026-51898: Improper Control of Generation of Code
sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute...
CVE-2026-51898
sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute...
CVE-2026-51898
sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute...
CVE-2026-51898
The sinaptik-ai pandas-ai library, version 3.0.0 , is vulnerable to a Code Injection vulnerability within the CodeExecutor.execute function. This flaw is associated with CWE-94 (Improper Control of Generation of Code). The vulnerability has a CRITICAL severity (CVSS 3.1 score of 9.8 ), allowing f...
CVE-2026-4998
A weakness has been identified in Sinaptik AI PandasAI up to 3.0.0. This vulnerability affects the function CodeExecutor.execute of the file pandasai/core/codeexecution/codeexecutor.py of the component Chat Message Handler. Executing a manipulation can lead to code injection. The attack may be...
CVE-2026-4998
CVE-2026-4998 affects Sinaptik AI PandasAI up to 3.0.0, specifically the CodeExecutor.execute function in pandasai/core/code_execution/code_executor.py within the Chat Message Handler. The description states that executing a manipulation can lead to code injection, with remote exploitation possib...
CVE-2026-4998: Improper Control of Generation of Code
A weakness has been identified in Sinaptik AI PandasAI up to 3.0.0. This vulnerability affects the function CodeExecutor.execute of the file pandasai/core/codeexecution/codeexecutor.py of the component Chat Message Handler. Executing a manipulation can lead to code injection. The attack may be...