CVE-2025-52386

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

CycloneDX Sunshine v0.9 is vulnerable to CSV Formula Injection via a crafted JSON file

Published 2025-08-13. Last modified 2026-06-17.