7132 matches found
Malicious code in neuromorphic-terser-csv-dagda (npm)
The package neuromorphic-terser-csv-dagda was found to contain malicious code...
Malicious code in norma-csv-impulse-gatsby (npm)
The package norma-csv-impulse-gatsby was found to contain malicious code...
Malicious code in public-csv-carpo-cygnus (npm)
The package public-csv-carpo-cygnus was found to contain malicious code...
Malicious code in zephyr-graviton-csv-bootstrap (npm)
The package zephyr-graviton-csv-bootstrap was found to contain malicious code...
Malicious code in csv-cosmicray-mui-spica (npm)
The package csv-cosmicray-mui-spica was found to contain malicious code...
Malicious code in csv-module-mocha-lyra (npm)
The package csv-module-mocha-lyra was found to contain malicious code...
Malicious code in csv-mineralogy-pm2-transform (npm)
The package csv-mineralogy-pm2-transform was found to contain malicious code...
Malicious code in csv-uglify-js-protractor-grus (npm)
The package csv-uglify-js-protractor-grus was found to contain malicious code...
Malicious code in dependencies-envconfig-csv-auriga (npm)
The package dependencies-envconfig-csv-auriga was found to contain malicious code...
Malicious code in terser-module-csv-promise (npm)
The package terser-module-csv-promise was found to contain malicious code...
Malicious code in csv-jekyll-equinox-pegasus (npm)
The package csv-jekyll-equinox-pegasus was found to contain malicious code...
Malicious code in covid19_nagano_csv_to_json (npm)
The package covid19naganocsvtojson was found to contain malicious code...
MAL-2025-17802 Malicious code in csv-hermes-cryonics-solis (npm)
The package csv-hermes-cryonics-solis was found to contain malicious code...
Malicious code in yyf-csv (npm)
The package yyf-csv was found to contain malicious code...
MAL-2025-17801 Malicious code in csv-cosmicray-mui-spica (npm)
The package csv-cosmicray-mui-spica was found to contain malicious code...
MAL-2025-17804 Malicious code in csv-mineralogy-pm2-transform (npm)
The package csv-mineralogy-pm2-transform was found to contain malicious code...
PT-2025-32992 · Unknown · Cyclonedx Sunshine
Name of the Vulnerable Software and Affected Versions: CycloneDX Sunshine version 0.9 Description: CycloneDX Sunshine version 0.9 is vulnerable to CSV Formula Injection via a crafted JSON file. Recommendations: At the moment, there is no information about a newer version that contains a fix for...
CVE-2025-52386: Improper Neutralization of Formula Elements in a CSV File
CycloneDX Sunshine v0.9 is vulnerable to CSV Formula Injection via a crafted JSON file...
CVE-2025-52386
The open-source visualization tool CycloneDX Sunshine version v0.9 is vulnerable to CSV Formula Injection (CWE-1236). The root cause is the software's failure to validate formulas when processing crafted JSON files . This vulnerability can lead to malicious code execution or data exfiltration whe...
