ROOT-APP-NPM-CVE-2024-34448 CVE-2024-34448 in @rootio/tryghost__members-csv - Patched by Root

Root has patched CVE-2024-34448 in the @rootio/tryghostmembers-csv package for Root:npm. Multiple fixed versions available...

CVE-2024-34448

Ghost before 5.82.0 allows CSV Injection during a member CSV export...

CVE-2024-34448

Ghost before 5.82.0 allows CSV Injection during a member CSV export...

CVE-2024-34448

Ghost versions prior to 5.82.0 are vulnerable to CSV Injection during a member CSV export. The root cause is inadequate input sanitization , which allows an attacker to inject malicious content into exported CSV files. This content can then be executed when the file is opened by a spreadsheet app...

CVE-2024-34448

Ghost before 5.82.0 allows CSV Injection during a member CSV export...

CVEs

CVEs Public repository CVEs...