Search results

Pandas DataFrame.query Code Injection (Unpatched)

Closing CandidateMay be closeable, needs more eyeballsMay be closeable, needs more eyeballs

expressionspd.eval, querypd.eval, query

Status: Closed (completed).

#61559 In pandas-dev/pandas;

· by clyormz was closed on Jun 5, 2025

BUG: AttributeError on method call after binary operation in eval expression

Bug

expressionspd.eval, querypd.eval, query

Status: Closed (completed).

#61175 In pandas-dev/pandas;

· by stewit was closed on Mar 31, 2025

 ·  

3.0

QST: Does the project consider DataFrame.query() arbitrary code execution to be a security vulnerability?

Closing CandidateMay be closeable, needs more eyeballsMay be closeable, needs more eyeballs

expressionspd.eval, querypd.eval, query

Usage Question

Status: Closed (completed).

#60602 In pandas-dev/pandas;

· by nickodell was closed on Dec 26, 2024

BUG: df.query("<code>1</code> == 0.1") failed with UndefinedVariableError: name 'BACKTICK_QUOTED_STRING_1' is not defined

Bug

expressionspd.eval, querypd.eval, query

Status: Closed (completed).

#60494 In pandas-dev/pandas;

· by auderson was closed on Apr 1, 2025

DOC: Update variables a and b to names consistent with comment documentation

Clean

expressionspd.eval, querypd.eval, query

Status: Closed (completed).

#60366 In pandas-dev/pandas;

· by migelogali was closed on Dec 9, 2024

BUG: DataFrame.query() throws error when df has duplicate column names

Bug

expressionspd.eval, querypd.eval, query

good first issue

Status: Closed (completed).

#59950 In pandas-dev/pandas;

· by ddenuyl-bebr was closed on Nov 5, 2024

BUG: Error on query function when the column name has # symbol

Bug

expressionspd.eval, querypd.eval, query

Status: Closed (completed).

#59285 In pandas-dev/pandas;

· by yangjlx was closed on Aug 20, 2024

BUG: eval fails to process expression when one column name starts with a digit or some special characters

Bug

expressionspd.eval, querypd.eval, query

Status: Closed (completed).

#59043 In pandas-dev/pandas;

· by Reimarleo was closed on Jun 18, 2024

BUG: eval fails for ExtensionArray

Bug

expressionspd.eval, querypd.eval, query

ExtensionArrayExtending pandas with custom dtypes or arrays.Extending pandas with custom dtypes or arrays.

Status: Closed (completed).

#58748 In pandas-dev/pandas;

· by mutricyl was closed on Jun 12, 2024

DOC: Inconsistent and incomplete documentation of <code>pandas.eval</code>

Docs

expressionspd.eval, querypd.eval, query

Status: Closed (completed).

#58338 In pandas-dev/pandas;

· by domsmrz was closed on Sep 25, 2024

BUG: Numexpr engine - Name of the returned series dropped when using user function in <code>DataFrame.eval</code>

Bug

expressionspd.eval, querypd.eval, query

Status: Closed (completed).

#58069 In pandas-dev/pandas;

· by domsmrz was closed on Apr 29, 2024

BUG: Numpy not directly usable in DataFrame.eval and DataFrame.query

Bug

expressionspd.eval, querypd.eval, query

Status: Closed (completed).

#58041 In pandas-dev/pandas;

· by domsmrz was closed on Apr 8, 2024