CVE-2026-9673 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...

CVE-2026-9673

Versions of the package json-2-csv from 3.15.0 and before 5.5.11 are vulnerable to CSV Injection via the preventCsvInjection option which can be bypassed. An attacker can inject formulas into CSV files, which execute when the files are opened in spreadsheet applications...

@adeunis/codecs (>=1.3.0 <=1.4.0), @andrewcturing/todoist (=0.0.1) +53 more potentially affected by CVE-2026-9673 via json-2-csv (>=3.20.0 <=5.5.1)

json-2-csv NPM version =3.20.0, =1.3.0, =1.8.0, =5.0.2, =0.0.1, =0.2.3, =0.1.0, =0.1.0, =0.5.1, =1.0.2, =1.3.1, =3.0.7, =1.0.5, =3.0.9-beta.0 and more Source cves: CVE-2026-9673 Source advisory: SNYK:JS-JSON2CSV-14221326...