Skip to content
OpenAdvisories

Package · npm

csv-parse

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.9
    CVE-2026-85063

    node-csv: Prototype replacement still reachable via columns path

    node-csv is a full-featured CSV parser with a simple API that is tested against large datasets. Prior to 7.0.2, csv-parse with the columns and group_columns_by_name options enabled treats a duplicate __proto__ header as an existing property in packages/csv-pa…

    adaltas node-csv csv-parse node-csv-parse Debian Ubuntu npm
  • High 7.5
    CVE-2019-17592

    Regular Expression Denial of Service in csv-parse

    The csv-parse module before 4.4.6 for Node.js is vulnerable to Regular Expression Denial of Service. The __isInt() function contains a malformed regular expression that processes large crafted input very slowly. This is triggered when using the cast option.

    csv-parse npm