[LOW] handcraftedinthealps/goodby-csv has Potential Gadget Chain allowing Remote Code Execution

PKSA-64ps-65mk-fh85 CVE-2025-49597 GHSA-x3c7-22c8-prg7

Affected package: handcraftedinthealps/goodby-csv

Affected version: <1.4.3

Reported by:
GitHub