RubySec

Providing security resources for the Ruby community

CVE-2022-28481 (csv-safe): CSV-Safe improperly filters special characters potentially leading to CSV injection

ADVISORIES

GEM

csv-safe

SEVERITY

CVSS v3.x: 9.8 (Critical)

PATCHED VERSIONS

  • >= 3.0.0

DESCRIPTION

CSV-Safe gem < 3.0.0 doesn't filter out special characters which could trigger CSV Injection.

RELATED

Contact us @rubysec or open an issue on our GitHub repository.

Recent Advisories