EUVD-2026-45202

Open Event Server through 1.19.1 contains a missing authentication vulnerability that allows unauthenticated attackers to export the complete member roster of any group, including email addresses, names, join dates, and roles, by submitting requests to the group followers CSV export endpoint whic...

EUVD-2024-1862

Malicious code in bioql PyPI...

BIT-GHOST-2024-34448

Ghost before 5.82.0 allows CSV Injection during a member CSV export...

GHSA-XGWH-CGV9-783V Ghost allows CSV Injection during member CSV export

Ghost before 5.82.0 allows CSV Injection during a member CSV export...

Ghost allows CSV Injection during member CSV export

Ghost before 5.82.0 allows CSV Injection during a member CSV export...

CVE-2024-34448

Ghost before 5.82.0 allows CSV Injection during a member CSV export...

CVE-2024-34448

CVE-2024-34448 affects Ghost prior to 5.82.0. The vulnerability arises in the member CSV export feature, where insufficient input sanitization enables CSV injection in exported files. Documents consistently describe Ghost as vulnerable to CSV injection via the CSV export process. Impact is descri...