https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T15:25:18.642468+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-242079 EUVD-2026-242079 2026-10-14T15:25:18.710628+00:00 EUVD-2026-242079 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23752 fkie_cve-2024-23752 2026-10-14T15:25:18.710660+00:00

GenerateSDFPipeline in synthetic_dataframe in PandasAI (aka pandas-ai) through 1.5.17 allows attackers to trigger the generation of arbitrary Python code that is executed by SDFCodeExecutor. An attacker can create a dataframe that provides an English language specification of this Python code. NOTE: the vendor previously attempted to restrict code execution in response to a separate issue, CVE-2023-39660.

 https://cve.radiocsirt.org/vuln/ghsa-5g73-69p4-7gvx GHSA-5g73-69p4-7gvx — Code execution in pandasai 2026-10-14T15:25:18.710691+00:00

Affected: PyPI: pandasai

GenerateSDFPipeline in synthetic_dataframe in PandasAI (aka pandas-ai) through 1.5.17 allows attackers to trigger the generation of arbitrary Python code that is executed by SDFCodeExecutor. An attacker can create a dataframe that provides an English language specification of this Python code. NOTE: the vendor previously attempted to restrict code execution in response to a separate issue, CVE-2023-39660.

 https://cve.radiocsirt.org/vuln/gsd-2024-23752 gsd-2024-23752 2026-10-14T15:25:18.710718+00:00 gsd-2024-23752 https://cve.radiocsirt.org/vuln/pysec-2026-446 PYSEC-2026-446 — Code execution in pandasai 2026-10-14T15:25:18.710747+00:00

Affected: PyPI: pandasai

GenerateSDFPipeline in synthetic_dataframe in PandasAI (aka pandas-ai) through 1.5.17 allows attackers to trigger the generation of arbitrary Python code that is executed by SDFCodeExecutor. An attacker can create a dataframe that provides an English language specification of this Python code. NOTE: the vendor previously attempted to restrict code execution in response to a separate issue, CVE-2023-39660.