Approved changes feed: RSS · Atom
cpe:2.3:a:gabrieleventuri:pandasai:*:*:*:*:*:python:*:*part: a version: * update: *
| Vendor | Gabrieleventuri (89200129-9daf-5930-bc16-f2d07e2351bd) |
|---|---|
| Product | Pandasai (457b199c-26cb-5dc3-bfa6-6ad228252189) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | python |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/gventuri/pandas-ai |
purl2cpe | 2026-06-01 10:14:52.596837 |
pkg:pypi/pandasai |
purl2cpe | 2026-06-01 10:14:52.596839 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-30273 |
vulnerable | 2026-06-08 07:57:13.971250 |
Details available
pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base._execute_sql_query component.
Published: 2026-04-01T00:00:00.000Z
Updated: 2026-04-01T18:19:20.151Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23752 |
vulnerable | 2026-06-08 06:29:40.373366 |
Details available
GenerateSDFPipeline in synthetic_dataframe in PandasAI (aka pandas-ai) through 1.5.17 allows attackers to trigger the generation of arbitrary Python code that is executed by SDFCodeExecutor. An attacker can create a dataframe that provides an English language specification of this Python code. NOTE: the vendor previously attempted to restrict code execution in response to a separate issue, CVE-2023-39660.
Published: 2024-01-22T00:00:00.000Z
Updated: 2025-05-30T14:23:33.821Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39661 |
vulnerable | 2026-06-08 06:09:37.881657 |
Details available
An issue in pandas-ai v.0.9.1 and before allows a remote attacker to execute arbitrary code via the _is_jailbreak function.
Published: 2023-08-15T00:00:00.000Z
Updated: 2024-10-08T20:27:01.469Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39660 |
vulnerable | 2026-06-08 06:09:37.881103 |
Details available
An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function.
Published: 2023-08-21T00:00:00.000Z
Updated: 2024-10-07T16:42:08.753Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.