Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-26249
9.8
CRITICALCVSS v3
Published
March 24, 2022
CVSS v2
7.5 HIGH
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Survey King v0.3.0 does not filter data properly when exporting excel files, allowing attackers to execute arbitrary code or access sensitive information via a CSV injection attack.
javahuang/SurveyKing
GitHubOne command to deploy a more powerful, self‑hosted alternative to SurveyMonkey.
GitHubOne command to deploy a more powerful, self‑hosted alternative to SurveyMonkey.= 0.3.0NVD