CVE-2025-52386

Published August 13th, 2025

View on NVD ↗

CVSS v3

5.4

MEDIUM

CVSS v2

N/A

Affected

2

PROJECTS

Description

CycloneDX Sunshine v0.9 is vulnerable to CSV Formula Injection via a crafted JSON file

CycloneDX/Sunshine

Sunshine - SBOM visualization tool

GitHub

115

VishalSreenivas/Formula-Injection-in-CycloneDX-Sunshine

GitHub