pandas up to 2.2.2 pandas.DataFrame.query code injection 🚫 [False Positive]

Noticeinfo

⚠️ This issue looks like a false-positive. Please review the listed sources and think about not using this entry.

Productinfo

Name

• pandas

Version

• 2.2.0
• 2.2.1
• 2.2.2

Timelineinfo

10/11/2024 🔍
03/20/2025 +160 days 🔍
03/20/2025 +0 days 🔍
03/27/2025 +6 days 🔍

Sourcesinfo

Advisory: huntr.com
False Positive: Yes

CVE: CVE-2024-9880 (🔍)
GCVE (CVE): GCVE-0-2024-9880
GCVE (VulDB): GCVE-100-300331

Entryinfo

Created: 03/20/2025 14:33
Updated: 03/27/2025 00:27
Changes: 03/20/2025 14:33 (61), 03/27/2025 00:27 (3)
Complete: 🔍
Cache ID: 216::103

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!