CVE-2025-49597
1 advisory.
Packagist/handcraftedinthealps/goodby-csv CVE-2025-49597: low 3.9, EPSS 0.25%
handcraftedinthealps/goodby-csv has Potential Gadget Chain allowing Remote Code Execution
Action: Upgrade handcraftedinthealps/goodby-csv to 1.4.3 or later.
composer require handcraftedinthealps/goodby-csv:1.4.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.3 | - |
Fixed versions
| 1.4.3 |
Sources
- osv: GHSA-x3c7-22c8-prg7
- https://github.com/handcraftedinthealps/goodby-csv/security/advisories/GHSA-x3c7-22c8-prg7
- https://nvd.nist.gov/vuln/detail/CVE-2025-49597
- https://github.com/handcraftedinthealps/goodby-csv/commit/acd14c6ed85116bb2cb4da35ab62821e5cf54519
- https://github.com/handcraftedinthealps/goodby-csv
CVE-2025-49597 · published · modified · JSON