Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/pandasai@3.0.0b7
purl pkg:pypi/pandasai@3.0.0b7
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
CVE-2026-30273

SQL Injection via _execute_sql_query component pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base._execute_sql_query component. There are no reported fixed by versions.
This package is not known to fix any advisories.