MEDIUM 5.1 NVD
CVE-2026-124591
A vulnerability was detected in Bahleel 0.1.0/0.1.1. Affected is the function fputcsv of the file app/Exporters/CsvExporter.php. The manipulation results in csv
A vulnerability was detected in Bahleel 0.1.0/0.1.1. Affected is the function fputcsv of the file app/Exporters/CsvExporter.php. The manipulation results in csv injection. The attack may be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.
References
- https://github.com/bahleel/bahleel/
- https://github.com/bahleel/bahleel/issues/1
- https://vuldb.com/cve/CVE-2026-124591
- https://vuldb.com/submit/1040551
- https://vuldb.com/vuln/433015
This medium severity vulnerability with a CVSS score of 5.1 was published on 2026-11-09 via NVD.
vulnfeed aggregates 17092 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.