The Absurdly Underestimated Dangers of CSV Injection
georgemauer.net/2017/10/07/csv-injection.html
What Jamie wrote
Interesting writeup on injecting formulas into CSV data to affect the behavior of the software that is reading the CSV. This example uses the preference that spreadsheets have to interpret formulas embedded in CSV files. Security risks like this can be surprising, even to very technical people, since the data isn't an executable itself.