| Package | Affected versions | Patched versions |
|---|---|---|
| inventree | < 0.7.2 | 0.7.2 |
Datasets exported to file (e.g. CSV / XLS) are not sufficiently sanitized, to neutralize potential formula injection
Users exporting untrusted data should open the files in safe mode (e.g. in Microsoft Excel).
If you have any questions or comments about this advisory:
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free