ROOT-APP-NPM-CVE-2024-34448 CVE-2024-34448 in @rootio/tryghost__members-csv - Patched by Root

Root has patched CVE-2024-34448 in the @rootio/tryghostmembers-csv package for Root:npm. Multiple fixed versions available...

CVE-2024-34448

Ghost before 5.82.0 allows CSV Injection during a member CSV export...

CVE-2024-34448

Ghost versions prior to 5.82.0 are vulnerable to CSV Injection during a member CSV export. The root cause is the improper neutralization of special elements in output used by a downstream component, specifically within the @rootio/tryghost__members-csv package. An attacker can exploit this during...

CVE-2024-34448

Ghost before 5.82.0 allows CSV Injection during a member CSV export...

CVE-2024-34448

Ghost before 5.82.0 allows CSV Injection during a member CSV export...

CVEs

CVEs Public repository CVEs...