CVE-2026-83543 Greenshift < 13.2.0 - Contributor+ SSRF via get-csv-to-json REST Endpoint

The Greenshift WordPress plugin before 13.2.0 does not validate a user-supplied URL before fetching it server-side, allowing users with contributor-level access and above to make the server issue requests to arbitrary hosts and read the response...

Prototype Pollution

Overview csvtojson is an A tool concentrating on converting csv data to JSON with customised parser supporting Affected versions of this package are vulnerable to Prototype Pollution in the parserjsonarray process due to insufficient sanitization of nested header names. An attacker can cause deni...

PT-2025-39315

Name of the Vulnerable Software and Affected Versions csvtojson versions prior to 2.0.10 Description The csvtojson package has a flaw due to inadequate sanitization of nested header names during parsing. Processing CSV input with crafted header fields referencing prototype chains like using proto...

CVE-2025-57350

The csvtojson package (versions prior to 2.0.10 ) contains a prototype pollution vulnerability (CWE-1321) due to insufficient sanitization of nested header names in the parser_jsonarray component. Processing specially crafted CSV files with fields referencing prototype chains (e.g., __proto__) ca...

Malicious code in covid19_nagano_csv_to_json (npm)

The package covid19naganocsvtojson was found to contain malicious code...