https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 15:10:20 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-31881 EUVD-2026-31881 https://cve.radiocsirt.org/vuln/euvd-2026-31881 https://cve.radiocsirt.org/vuln/fkie_cve-2021-41824 <p>Craft CMS before 3.7.14 allows CSV injection.</p> <p>Craft CMS before 3.7.14 allows CSV injection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-41824 https://cve.radiocsirt.org/vuln/ghsa-h7vq-5qgw-jwwq <p><strong>Affected:</strong> Packagist: craftcms/cms</p> <p>### Impact In some circumstances, it was possible to export data in CSV format that could trigger a payload in old versions of Excel.</p> <p>If you are accepting user input from untrusted sources and will be exporting that data in CSV format from element index pages and there is a chance users will open that on old versions of Excel, then you should update.</p> <p>### Patches This has been patched in Craft 3.7.14.</p> <p>### References * https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#3714---2021-09-28 * https://twitter.com/craftcmsupdates/status/1442928690145366018</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, email us at support@craftcms.com</p> <p>----------</p> <p>Credits: BAE Systems AI Vulnerability Research Team – Azrul Ikhwan Zulkifli</p> <p><strong>Affected:</strong> Packagist: craftcms/cms</p> <p>### Impact In some circumstances, it was possible to export data in CSV format that could trigger a payload in old versions of Excel.</p> <p>If you are accepting user input from untrusted sources and will be exporting that data in CSV format from element index pages and there is a chance users will open that on old versions of Excel, then you should update.</p> <p>### Patches This has been patched in Craft 3.7.14.</p> <p>### References * https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#3714---2021-09-28 * https://twitter.com/craftcmsupdates/status/1442928690145366018</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, email us at support@craftcms.com</p> <p>----------</p> <p>Credits: BAE Systems AI Vulnerability Research Team – Azrul Ikhwan Zulkifli</p> https://cve.radiocsirt.org/vuln/ghsa-h7vq-5qgw-jwwq https://cve.radiocsirt.org/vuln/gsd-2021-41824 gsd-2021-41824 https://cve.radiocsirt.org/vuln/gsd-2021-41824