CVE-2026-51898

sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute...

CVE-2026-51898

sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute...

EUVD-2026-91705

sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute...

CVE-2026-51898

sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute...

PT-2026-104362

Name of the Vulnerable Software and Affected Versions pandas-ai version 3.0.0 Description The software is subject to code injection within the CodeExecutor.execute function. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2026-51898: Improper Control of Generation of Code

sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute...

CVE-2026-51898

The sinaptik-ai pandas-ai library, version 3.0.0 , is vulnerable to a Code Injection vulnerability within the CodeExecutor.execute function. This flaw is associated with CWE-94 (Improper Control of Generation of Code). The vulnerability has a CRITICAL severity (CVSS 3.1 score of 9.8 ), allowing f...

PYSEC-2026-446 Code execution in pandasai

GenerateSDFPipeline in syntheticdataframe in PandasAI aka pandas-ai through 1.5.17 allows attackers to trigger the generation of arbitrary Python code that is executed by SDFCodeExecutor. An attacker can create a dataframe that provides an English language specification of this Python code. NOTE:...

PT-2026-53528

An issue in pandas-ai v.0.8.1 and before allows a remote attacker to execute arbitrary code via the is jailbreak function...

CVE-2026-30273

pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base.executesqlquery component...

EUVD-2026-17959

pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base.executesqlquery component...

CVE-2026-30273

pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base.executesqlquery component...

PT-2026-29566

pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base. execute sql query component...

CVE-2026-30273

pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base.executesqlquery component...

CVE-2026-30273: Improper Neutralization of Special Elements used in an SQL Command

pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base.executesqlquery component...

CVE-2026-30273

pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base.executesqlquery component...

CVE-2026-30273

The pandas-ai library (version v3.0.0 ) contains a SQL injection vulnerability within the pandasai.agent.base._execute_sql_query component. The root cause is a lack of protective measures for SQL query structures. An attacker operating remotely can exploit this flaw to gain read access to arbitra...

EUVD-2023-2245

Malicious code in bioql PyPI...

CVE-2023-39661

An issue in pandas-ai v.0.9.1 and before allows a remote attacker to execute arbitrary code via the isjailbreak function...

Arbitrary Code Execution

pandasai is vulnerable to Arbitrary Code Execution. An attacker is able to exploit this vulnerability by sending a specially crafted request to the Pandas-AI server. This request would cause the server to execute arbitrary code with the privileges of the root user. The vulnerability exists in...