@tryghost/members-csv

v2.0.7npm· JavaScript

There are 2 parts to this package: CSV to JSON serialization and JSON to CSV serialization. The module exposes 2 methods to fulfil these: `parse` and `unparse` respectively.

The verdict

Has 1 high-severity advisory. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceHealthy

PopularityUnknown

Security1 advisory

LicensePermissive

DepsLean

Maintenance

Last published 1 month ago.

Popularity

Download count unavailable.

Security

1 known advisory (worst: high severity).

License

MIT

Dependencies

4 direct dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
Ghost allows CSV Injection during member CSV export
GHSA-xgwh-cgv9-783v Fixed in 5.82.0Published 2024-05-22

Recent releases

2.0.71 month ago
2.0.53 months ago
2.0.43 months ago
2.0.3over a year ago
2.0.2over a year ago
2.0.1over a year ago
1.2.164 years ago
1.2.154 years ago