Skip to content

@actual-app/web has CSV Formula Injection in Transaction Export via Imported Payee/Notes Fields

Moderate severity GitHub Reviewed Published Jun 12, 2026 in actualbudget/actual

No open alerts for this advisory

Give feedback on Dependabot alerts