Approved changes feed: RSS · Atom

cpe:2.3:a:verbb:knock_knock:4.1.1:*:*:*:*:*:*:*

part: a version: 4.1.1 update: *

VendorVerbb (ecfa9ad1-6e3a-58c0-a96e-8eda20e19ffa)
ProductKnock Knock (e23ff2be-a003-5973-891c-75061db49c3a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-36941 vulnerable 2026-06-08 05:25:49.886581 Knockpy 4.1.1 - CSV Injection
CRITICAL (9.8)
Knockpy 4.1.1 contains a CSV injection vulnerability that allows attackers to inject malicious formulas into CSV reports through unfiltered server headers. Attackers can manipulate server response headers to include spreadsheet formulas that will execute when the CSV is opened in spreadsheet applications.
Published: 2026-01-27T15:23:48.210Z
Updated: 2026-03-05T01:27:00.501Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.