CycloneDX Sunshine v0.9 is vulnerable to CSV Formula Injection via a crafted JSON file

Published Aug 13, 2025 · Updated Aug 13, 2025 · Assigned by mitre