Threats tagged 'ghsa-qf94-rv9f-rq5r'

A CSV injection vulnerability exists in Bahleel versions 0.1.0 and 0.1.1 within the fputcsv function of app/Exporters/CsvExporter.php. This vulnerability allows remote attackers to manipulate CSV output, potentially leading to malicious formula execution when the CSV is opened in spreadsheet software. The issue was reported early to the project, but no response or fix has been provided yet.