pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base._execute_sql_query component.

Published Apr 1, 2026 · Updated Apr 1, 2026 · Assigned by mitre