← All advisories

High severity7.3NVD Advisory· Published Apr 1, 2026· Updated Apr 6, 2026

CVE-2026-30273

CVE-2026-30273

Description

pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base._execute_sql_query component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Gabrieleventuri/Pandasai
cpe:2.3:a:gabrieleventuri:pandasai:*:*:*:*:*:python:*:*
Range: <=3.0.0
Sinaptik AI/Pandas AIllm-fuzzy
Range: = 3.0.0

Patches

Vulnerability mechanics

References

1

gist.github.com/CafeD1/21c32edbf1b63fd88a79c290ed2a8059nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.