CVE-2026-124591 | Bahleel 0.1.0/0.1.1 CsvExporter.php fputcsv csv injection

November 8, 2026 Yanac

A vulnerability categorized as critical has been discovered in Bahleel 0.1.0/0.1.1. Affected is the function fputcsv of the file app/Exporters/CsvExporter.php. The manipulation results in csv injection.

This vulnerability is cataloged as CVE-2026-124591. The attack may be launched remotely. There is no exploit available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More