PandasAI vulnerabilities

2 known vulnerabilities in PandasAI from Sinaptik AI. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  PandasAI: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-4998Mar 28, 2026Sinaptik AI

  A weakness has been identified in Sinaptik AI PandasAI up to 3.0.0. This vulnerability affects the function CodeExecutor.execute of the file pandasai/core/code_execution/code_executor.py of the component Chat Message Handler. Executing a manipulation can lead

• 7.3 High severity

  PandasAI: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-4996Mar 28, 2026Sinaptik AI

  A vulnerability was identified in Sinaptik AI PandasAI up to 0.1.4. Affected by this issue is the function delete_question_and_answers/delete_docs/update_question_answer/update_docs/get_relevant_question_answers_by_id/get_relevant_docs_by_id of the file extens