Skip to content
OpenAdvisories

Package · PyPI

pandasai

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Critical 9.8
    CVE-2024-12366

    CVE-2024-12366

    PandasAI uses an interactive prompt function that is vulnerable to prompt injection and run arbitrary Python code that can lead to Remote Code Execution (RCE) instead of the intended explanation of the natural language processing by the LLM.

    Sinaptik AI PandasAI pandasai PyPI
  • Critical 9.8
    CVE-2024-23752

    Code execution in pandasai

    GenerateSDFPipeline in synthetic_dataframe in PandasAI (aka pandas-ai) through 1.5.17 allows attackers to trigger the generation of arbitrary Python code that is executed by SDFCodeExecutor. An attacker can create a dataframe that provides an English language…

    pandasai PyPI
  • High —
    CVE-2023-39660

    pandasai vulnerable to prompt injection

    An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function.

    pandasai PyPI
  • Critical 9.8
    CVE-2023-39661

    PandasAI vulnerable to arbitrary code execution

    An issue in pandas-ai v.0.9.1 and before allows a remote attacker to execute arbitrary code via the _is_jailbreak function.

    pandasai PyPI