{"action":"Upgrade craftcms/cms to 3.7.14 or later.","affected":[{"fixed":"3.7.14","introduced":"3.4.0"}],"component":"craftcms/cms","cve_ids":["CVE-2021-41824"],"ecosystem":"Packagist","epss":0.01373,"exploited":false,"fixed_versions":["3.7.14"],"ghsa_id":"GHSA-h7vq-5qgw-jwwq","id":"tcs_01M5KF3FTXG9F83CHWANQFJ01R","modified_at":"2026-07-08T06:30:00.010922240Z","published_at":"2021-10-18T19:04:16Z","references":["https://osv.dev/vulnerability/GHSA-h7vq-5qgw-jwwq","https://github.com/craftcms/cms/security/advisories/GHSA-h7vq-5qgw-jwwq","https://nvd.nist.gov/vuln/detail/CVE-2021-41824","https://github.com/craftcms/cms/commit/c9cb2225f1b908fb1e8401d401219228634b26b2","https://github.com/craftcms/cms","https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#3714---2021-09-28","https://twitter.com/craftcmsupdates/status/1442928690145366018"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-h7vq-5qgw-jwwq","url":"https://osv.dev/vulnerability/GHSA-h7vq-5qgw-jwwq"}],"summary":"CSV Injection Vulnerability"}