d99kris rapidcsv vulnerabilities

Latest d99kris rapidcsv CVEs

Newest publication first

1. CVE-2026-49206 rapidcsv: Integer overflow in iterator arithmetic causes out-of-bounds access

   Published 2026-10-14

   Low·CVSS 2.9 EPSS 0.16%

   rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames converted size_t indexes to int before adding them to std::vector iterators. On 64-bit systems, in a CSV matrix dimension containing more than 2^31 elements,...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.