https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 21:22:02 +0000 https://cve.radiocsirt.org/vuln/cve-2021-23654 <p><strong>Affected:</strong> html-to-csv</p> <p>This affects all versions of package html-to-csv. When there is a formula embedded in a HTML page, it gets accepted without any validation and the same would be pushed while converting it into a CSV file. Through this a malicious actor can embed or generate a malicious link or execute commands via CSV files.</p> <p><strong>Affected:</strong> html-to-csv</p> <p>This affects all versions of package html-to-csv. When there is a formula embedded in a HTML page, it gets accepted without any validation and the same would be pushed while converting it into a CSV file. Through this a malicious actor can embed or generate a malicious link or execute commands via CSV files.</p> https://cve.radiocsirt.org/vuln/cve-2021-23654 https://cve.radiocsirt.org/vuln/ghsa-fwf6-rw69-hhj4 <p><strong>Affected:</strong> PyPI: html-to-csv</p> <p>This affects all versions of package html-to-csv. When there is a formula embedded in a HTML page, it gets accepted without any validation and the same would be pushed while converting it into a CSV file. Through this a malicious actor can embed or generate a malicious link or execute commands via CSV files.</p> <p><strong>Affected:</strong> PyPI: html-to-csv</p> <p>This affects all versions of package html-to-csv. When there is a formula embedded in a HTML page, it gets accepted without any validation and the same would be pushed while converting it into a CSV file. Through this a malicious actor can embed or generate a malicious link or execute commands via CSV files.</p> https://cve.radiocsirt.org/vuln/ghsa-fwf6-rw69-hhj4