CVE-2026-83543 Greenshift < 13.2.0 - Contributor+ SSRF via get-csv-to-json REST Endpoint

The Greenshift WordPress plugin before 13.2.0 does not validate a user-supplied URL before fetching it server-side, allowing users with contributor-level access and above to make the server issue requests to arbitrary hosts and read the response...

Prototype Pollution

Overview csvtojson is an A tool concentrating on converting csv data to JSON with customised parser supporting Affected versions of this package are vulnerable to Prototype Pollution in the parserjsonarray process due to insufficient sanitization of nested header names. An attacker can cause deni...

CVE-2025-57350

The csvtojson package (prior to version 2.0.10 ) is vulnerable to a prototype pollution vulnerability in the parser_jsonarray component due to insufficient sanitization of nested header names. An attacker providing a maliciously constructed CSV file with fields referencing prototype chains (e.g.,...

PT-2025-39315

Name of the Vulnerable Software and Affected Versions csvtojson versions prior to 2.0.10 Description The csvtojson package has a flaw due to inadequate sanitization of nested header names during parsing. Processing CSV input with crafted header fields referencing prototype chains like using proto...

Malicious code in covid19_nagano_csv_to_json (npm)

The package covid19naganocsvtojson was found to contain malicious code...