https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-12T23:54:44.367292+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-108579 fkie_cve-2026-108579 2026-10-12T23:54:44.396242+00:00

OpenPanel through 2.3.0 contains a CSV formula injection vulnerability that allows unauthenticated attackers to embed spreadsheet formulas by supplying crafted profile IDs to the /track endpoint. Attackers can send tracking events with profile IDs like =HYPERLINK(...) matching a cohort, so exported cohort CSVs execute formulas that exfiltrate adjacent cell data.

 https://db.gcve.eu/vuln/ghsa-qhg3-x2wc-w8x2 GHSA-qhg3-x2wc-w8x2 2026-10-12T23:54:44.396413+00:00

OpenPanel through 2.3.0 contains a CSV formula injection vulnerability that allows unauthenticated attackers to embed spreadsheet formulas by supplying crafted profile IDs to the /track endpoint. Attackers can send tracking events with profile IDs like =HYPERLINK(...) matching a cohort, so exported cohort CSVs execute formulas that exfiltrate adjacent cell data.