diff --git a/core/lib/Drupal/Core/Mail/Plugin/Mail/PhpMail.php b/core/lib/Drupal/Core/Mail/Plugin/Mail/PhpMail.php
index a578a02463903dc949b5cf872d93904c29dc61df..1db46cf97c3344d670ad8331871611a4cf475bef 100644
--- a/core/lib/Drupal/Core/Mail/Plugin/Mail/PhpMail.php
+++ b/core/lib/Drupal/Core/Mail/Plugin/Mail/PhpMail.php
@@ -98,7 +98,7 @@ public function mail(array $message) {
       if (in_array(strtolower($name), self::MAILBOX_LIST_HEADERS, TRUE)) {
         // Split values by comma, but ignore commas encapsulated in double
         // quotes.
-        $value = str_getcsv($value, ',');
+        $value = str_getcsv($value, escape: '\\');
       }
       $headers->addHeader($name, $value);
     }
diff --git a/core/lib/Drupal/Core/Mail/Plugin/Mail/SymfonyMailer.php b/core/lib/Drupal/Core/Mail/Plugin/Mail/SymfonyMailer.php
index 80b545465e42c6e1f6b12c1a32ded8eb222ca5fc..83bf5c127fad56de12a53cfbe00482157e35520f 100644
--- a/core/lib/Drupal/Core/Mail/Plugin/Mail/SymfonyMailer.php
+++ b/core/lib/Drupal/Core/Mail/Plugin/Mail/SymfonyMailer.php
@@ -127,7 +127,7 @@ public function mail(array $message) {
           if (in_array(strtolower($name), self::MAILBOX_LIST_HEADERS, TRUE)) {
             // Split values by comma, but ignore commas encapsulated in double
             // quotes.
-            $value = str_getcsv($value, ',');
+            $value = str_getcsv($value, escape: '\\');
           }
           $headers->addHeader($name, $value);
         }
diff --git a/core/modules/migrate_drupal/tests/src/Traits/ValidateMigrationStateTestTrait.php b/core/modules/migrate_drupal/tests/src/Traits/ValidateMigrationStateTestTrait.php
index 56367c808ee5e7bc8a5c24fbe2b6bcb9122a9d2c..010f346ce9ad9edbaac01513a9e20b351f7d34a1 100644
--- a/core/modules/migrate_drupal/tests/src/Traits/ValidateMigrationStateTestTrait.php
+++ b/core/modules/migrate_drupal/tests/src/Traits/ValidateMigrationStateTestTrait.php
@@ -125,7 +125,7 @@ public function testMigrationState(): void {
     // Assert that each discovered migration has a corresponding declaration
     // in a migrate_drupal.yml.
     foreach ($discovered_unique as $datum) {
-      $data = str_getcsv($datum);
+      $data = str_getcsv($datum, escape: '');
       $in_finished = in_array($datum, $declared_unique[MigrationState::FINISHED]);
       $in_not_finished = in_array($datum, $declared_unique[MigrationState::NOT_FINISHED]);
       $found = $in_finished || $in_not_finished;
@@ -137,7 +137,7 @@ public function testMigrationState(): void {
     // not finished.
     $discovered_not_finished = array_diff($discovered_unique, $declared_unique[MigrationState::FINISHED]);
     foreach ($discovered_not_finished as $datum) {
-      $data = str_getcsv($datum);
+      $data = str_getcsv($datum, escape: '');
       $this->assertContains($datum, $declared_unique[MigrationState::NOT_FINISHED], sprintf("No migration found for version '%s' with source_module '%s' and destination_module '%s' declared in module '%s'", $version, $data[1], $data[2], $data[0]));
     }
   }
diff --git a/core/profiles/demo_umami/modules/demo_umami_content/src/InstallHelper.php b/core/profiles/demo_umami/modules/demo_umami_content/src/InstallHelper.php
index 9dc9ffe3dafb8d4beb3678066e1d2f25b731bd9e..68acfc98f8142ca14f01292aa3db570afd2c7845 100644
--- a/core/profiles/demo_umami/modules/demo_umami_content/src/InstallHelper.php
+++ b/core/profiles/demo_umami/modules/demo_umami_content/src/InstallHelper.php
@@ -184,9 +184,9 @@ protected function readMultilingualContent($filename) {
     foreach ($translated_languages as $language) {
       if (file_exists($default_content_path . "$language/$filename") &&
       ($handle = fopen($default_content_path . "$language/$filename", 'r')) !== FALSE) {
-        $header = fgetcsv($handle);
+        $header = fgetcsv($handle, escape: '');
         $line_counter = 0;
-        while (($content = fgetcsv($handle)) !== FALSE) {
+        while (($content = fgetcsv($handle, escape: '')) !== FALSE) {
           $keyed_content[$language][$line_counter] = array_combine($header, $content);
           $line_counter++;
         }