← Database

CVE-2026-30273

HIGH CVSS: 7.3 Published: 2026-04-01 Modified: 2026-06-17

Description

pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base._execute_sql_query component.

Affected Platforms

Gabrieleventuri Pandasai

Weakness Type

CWE-89

References