CVE-2026-110757 | Text::CSV_XS up to 1.64 CSV combine qty csv injection

October 17, 2026 Yanac

A vulnerability identified as critical has been detected in Text::CSV_XS up to 1.64. Affected by this issue is the function combine of the component CSV. Performing a manipulation of the argument qty results in csv injection.

This vulnerability is identified as CVE-2026-110757. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More