PyPI/html-to-csv CVE-2021-23654: unknown, EPSS 1.24%
This affects all versions of package html-to-csv. When there is a formula embedded in a HTML page, it gets accepted without any validation and the same would be pushed while converting it into a CSV f
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2021-866
- https://snyk.io/vuln/SNYK-PYTHON-HTMLTOCSV-1582784
- https://github.com/hanwentao/html2csv/blob/master/html2csv/converter.py
- https://github.com/advisories/GHSA-fwf6-rw69-hhj4
CVE-2021-23654 · published · modified · JSON