guelfoweb/knockpy

Releases15

Frequency8 months 3 weeks

Last Release 4 months ago

Stars4.16K

Knock Subdomain Scan

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2020-36941 ↗	Jan 27, 2026Tuesday, 27 January 2026, 16:16	9.8 CRITICAL	—
Knockpy 4.1.1 contains a CSV injection vulnerability that allows attackers to inject malicious formulas into CSV reports through unfiltered server headers. Attackers can manipulate server response headers to include spreadsheet formulas that will execute when the CSV is opened in spreadsheet applications.