hanwentao/html2csv

Releases4

Frequency1 day 6 hours

Last Release almost 7 years ago

Stars47

A utility that extracts tables from HTML documents and converts them to CSV format

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2021-23654 ↗	Nov 26, 2021Friday, 26 November 2021, 20:15	5.6 MEDIUM	7.5 HIGH
This affects all versions of package html-to-csv. When there is a formula embedded in a HTML page, it gets accepted without any validation and the same would be pushed while converting it into a CSV file. Through this a malicious actor can embed or generate a malicious link or execute commands via CSV files.