{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"html-to-csv","cve_ids":["CVE-2021-23654"],"ecosystem":"PyPI","epss":0.01245,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fwf6-rw69-hhj4","id":"tcs_01M5KGFQ06P59BEVHAM9KAF4ZG","modified_at":"2023-11-08T04:05:12.383816Z","published_at":"2021-11-26T20:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-866","https://snyk.io/vuln/SNYK-PYTHON-HTMLTOCSV-1582784","https://github.com/hanwentao/html2csv/blob/master/html2csv/converter.py","https://github.com/advisories/GHSA-fwf6-rw69-hhj4"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-866","url":"https://osv.dev/vulnerability/PYSEC-2021-866"}],"summary":"This affects all versions of package html-to-csv. When there is a formula embedded in a HTML page, it gets accepted without any validation and the same would be pushed while converting it into a CSV f"}