CVE-2026-85063 | adaltas node-csv up to 7.0.1 CSV Parser index.js injection

September 3, 2026 Yanac

A vulnerability marked as critical has been reported in adaltas node-csv up to 7.0.1. This impacts an unknown function of the file packages/csv-parse/lib/api/index.js of the component CSV Parser. This manipulation causes injection.

This vulnerability is registered as CVE-2026-85063. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More