MAL-2025-17803 Malicious code in csv-jekyll-equinox-pegasus (npm)

The package csv-jekyll-equinox-pegasus was found to contain malicious code...

MAL-2025-27722 Malicious code in norma-csv-impulse-gatsby (npm)

The package norma-csv-impulse-gatsby was found to contain malicious code...

Malicious code in neuromorphic-terser-csv-dagda (npm)

The package neuromorphic-terser-csv-dagda was found to contain malicious code...

Malicious code in csv-hermes-cryonics-solis (npm)

The package csv-hermes-cryonics-solis was found to contain malicious code...

Malicious code in csv-mineralogy-pm2-transform (npm)

The package csv-mineralogy-pm2-transform was found to contain malicious code...

Malicious code in csv-module-mocha-lyra (npm)

The package csv-module-mocha-lyra was found to contain malicious code...

Malicious code in dependencies-envconfig-csv-auriga (npm)

The package dependencies-envconfig-csv-auriga was found to contain malicious code...

Malicious code in csv-jekyll-equinox-pegasus (npm)

The package csv-jekyll-equinox-pegasus was found to contain malicious code...

Malicious code in public-csv-carpo-cygnus (npm)

The package public-csv-carpo-cygnus was found to contain malicious code...

Malicious code in yyf-csv (npm)

The package yyf-csv was found to contain malicious code...

MAL-2025-40690 Malicious code in yyf-csv (npm)

The package yyf-csv was found to contain malicious code...

MAL-2025-18286 Malicious code in dependencies-envconfig-csv-auriga (npm)

The package dependencies-envconfig-csv-auriga was found to contain malicious code...

PT-2025-32992 · Unknown · Cyclonedx Sunshine

Name of the Vulnerable Software and Affected Versions: CycloneDX Sunshine version 0.9 Description: CycloneDX Sunshine version 0.9 is vulnerable to CSV Formula Injection via a crafted JSON file. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

CVE-2025-52386

CVE-2025-52386 affects CycloneDX Sunshine v0.9. The issue arises when processing JSON input without validating formulas, enabling a CSV Formula Injection via crafted JSON files. Potential impact includes injection into downstream CSV, depending on how the data are consumed. The connected document...

CVE-2025-8808

A vulnerability was found in xujeff tianti 天梯 up to 2.3. It has been rated as problematic. This issue affects the function exportOrder of the file /tianti-module-admin/user/ajax/save of the component com.jeff.tianti.controller. The manipulation leads to csv injection. The attack may be initiated...

CVE-2025-8808

CVE-2025-8808 affects xujeff tianti 天梯 up to 2.3. The vulnerability is in the exportOrder function of /tianti-module-admin/user/ajax/save within com.jeff.tianti.controller, enabling CSV injection. Exploitation appears possible remotely and public disclosures exist. Multiple connected sources conf...

CVE-2025-2028

Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country flags in logs...

CVE-2025-2028

Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country flags in logs...

CVE-2025-2028 Lack of TLS validation

Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country flags in logs...

CVE-2025-2028

CVE-2025-2028 affects Check Point Management Log Server. Description: lack of TLS validation when downloading a CSV file that contains IP-to-country mappings used solely for displaying country flags in logs. Root cause: TLS validation is not performed for the CSV download. Impact: integrity could...