Description
CSV-Safe gem < 3.0.0 doesn't filter out special characters which could trigger CSV Injection.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | csv-safe | < 3.0.0 | 3.0.0 | GHSA-f55g-x8qq-2569 |
Critical · 9.8
CVE-2022-28481
EUVD-2022-3691GHSA-f55g-x8qq-2569
CSV-Safe improperly filters special characters potentially leading to CSV injection
Published May 1, 2022 · Updated Aug 3, 2024 · Assigned by mitre