repository icon
pandas-dev / pandas Project repository

Flexible and powerful data analysis / manipulation library for Python, providing labeled data structures similar to R data.frame objects, statistical functions, and much more

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN33 DAYS

FIX

WITHINN/A DAYS

Arbitrary File Overwrite Vulnerability via Pandas' to_parquet() Method
andrewdzzz
self closed
pd.util.hash_pandas_object does not meet the security collision requirement
kexinoh
pending
Pandas Query method RCE
happyhacking-k
duplicate
Critical
SSRF Chain to LFI via Pandas io/common.py
shadowbyte1
spam
LFI in pandas xml.py
shadowbyte1
informative
Medium
Pandas DataFrame query Function and Command Execution Vulnerabilities
aftersnows
High
•$750•CVE-2024-9880
Arbitrary File Read using pandas.read_table() function
hijack-everything
duplicate
Medium
Arbitrary file read vulnerability in Pandas
hijack-everything
duplicate
High
Arbitrary file read vulnerability.
saumyajeetdas
spam
Local File Read when reading XML file
nicecatch2000
not applicable
CVE-2022-32221: POST following PUT known bug
mjoyce88
pending