adaltas node-csv vulnerabilities

Latest adaltas node-csv CVEs

Newest publication first

1. CVE-2026-85063 node-csv: Prototype replacement still reachable via columns path

   Published 2026-09-03

   Medium·CVSS 6.9

   node-csv is a full-featured CSV parser with a simple API that is tested against large datasets. Prior to 7.0.2, csv-parse with the columns and group_columns_by_name options enabled treats a duplicate proto header as an existing property in packages/csv-parse/lib/api/index.js, ass...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.