Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/pandasai@1.2
purl pkg:pypi/pandasai@1.2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 4.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
PYSEC-2026-446
Aliases:
CVE-2024-23752
GHSA-5g73-69p4-7gvx
Code execution in pandasai GenerateSDFPipeline in synthetic_dataframe in PandasAI (aka pandas-ai) through 1.5.17 allows attackers to trigger the generation of … There are no reported fixed by versions.
PYSEC-2026-448
Aliases:
CVE-2024-12366
GHSA-vv2h-2w3q-3fx7
PandasAI interactive prompt function Remote Code Execution (RCE) PandasAI uses an interactive prompt function that is vulnerable to prompt injection … There are no reported fixed by versions.
CVE-2026-30273

SQL Injection via _execute_sql_query component pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base._execute_sql_query component. There are no reported fixed by versions.
This package is not known to fix any advisories.