Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
@actual-app/cli
@actual-app/cli vulnerabilities (npm)
1 vulnerability.
@actual-app/cli
npm
Actual: CSV Formula Injection in `@actual-app/cli` `--format csv` Output via Custom `escapeCsv` Helper
CVE-2026-46672
Fix available
4.6
Medium
June 22, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open