Pandas and NumPy vulnerabilities and fixes

CVEs that mention Pandas and NumPy, ranked by priority. 5 tracked.

Pandas and NumPy has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-10-23. Highest priority: CVE-2026-73487 (score 63/100).

• CVE-2026-73487 CRITICAL 9.8 UPGRADE Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent nodes that
• CVE-2026-35052 CRITICAL 9.8 UPGRADE D-Tale is the combination of a Flask back-end and a React front-end to view & analyze Pandas data structures
• CVE-2026-69256 HIGH 8.8 UPGRADE Flowise is a drag & drop user interface to build a customized large language model flow
• CVE-2026-73484 HIGH 8.1 UPGRADE Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block nat
• CVE-2026-57845 HIGH 8.8 Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers t

FAQ

How do I fix Pandas and NumPy vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Pandas and NumPy being exploited right now?

None of the tracked Pandas and NumPy CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Pandas and NumPy CVE should I patch first?

CVE-2026-73487 currently ranks highest (63/100): Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent nodes that .

← Back to latest CVEs