Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-30273
7.3
HIGHCVSS v3
Published
April 1, 2026
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base._execute_sql_query component.
sinaptik-ai/pandas-ai
GitHubChat with your database or your datalake (SQL, CSV, parquet). PandasAI makes data analysis conversational using LLMs and RAG.
GitHubChat with your database or your datalake (SQL, CSV, parquet). PandasAI makes data analysis conversational using LLMs and RAG.<= 3.0.0NVD