| Package | Affected versions | Patched versions |
|---|---|---|
| ghost | < 5.82.0 | 5.82.0 |
| @tryghost/members-csv | < 5.82.0 | 5.82.0 |
Ghost before 5.82.0 allows CSV Injection during a member CSV export.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free