repository icon
pandas-dev / pandas Project repository

Flexible and powerful data analysis / manipulation library for Python, providing labeled data structures similar to R data.frame objects, statistical functions, and much more

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN27 DAYS

FIX

WITHINN/A DAYS

Untrusted XSLT in pandas read_xml(stylesheet=...) can read local XML files via d...
kjk-719
self closed
SQL Injection in ADBC backend via unescaped identifiers in `read_sql_table()` co...
hax1ng
pending
Unsafe pickle deserialization in pandas.read_pickle() with no opt-in safety
etwithin
pending
Pandas `read_csv` Crafted Input Triggers Out-of-Memory Amplification and Remote...
12astro
pending
XXE File Disclosure and DoS via pandas.read_xml() in pandas
darkeeeandme
duplicate
Critical
Potential Code Injection via Crafted Input in pandas.DataFrame.query()
nitij-taneja
pending
Arbitrary code execution via pandas.eval() with engine fallback in Pandas
kerkroups
pending
Arbitrary File Overwrite Vulnerability via Pandas' to_parquet() Method
andrewdzzz
self closed
pd.util.hash_pandas_object does not meet the security collision requirement
kexinoh
pending
Pandas Query method RCE
happyhacking-k
duplicate
Critical
SSRF Chain to LFI via Pandas io/common.py
shadowbyte1
spam
LFI in pandas xml.py
shadowbyte1
informative
Medium
Pandas DataFrame query Function and Command Execution Vulnerabilities
aftersnows
High
•$750•CVE-2024-9880
Arbitrary File Read using pandas.read_table() function
hijack-everything
duplicate
Medium
Arbitrary file read vulnerability in Pandas
hijack-everything
duplicate
High
Arbitrary file read vulnerability.
saumyajeetdas
spam
Local File Read when reading XML file
nicecatch2000
not applicable
CVE-2022-32221: POST following PUT known bug
mjoyce88
pending
huntr: pandas-dev/pandas