Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/pandasai@2.4.1
purl pkg:pypi/pandasai@2.4.1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 4.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
PYSEC-2026-448
Aliases:
CVE-2024-12366
GHSA-vv2h-2w3q-3fx7
PandasAI interactive prompt function Remote Code Execution (RCE) PandasAI uses an interactive prompt function that is vulnerable to prompt injection … There are no reported fixed by versions.
CVE-2026-30273

SQL Injection via _execute_sql_query component pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base._execute_sql_query component. There are no reported fixed by versions.
This package is not known to fix any advisories.