4 matches found
CLSA-2026-1775608289 TuxCare security update for ini (1 CVE)
TuxCare rebuilt ini to address 1 CVE. Fixed in 1.3.3-tuxcare.1...
parse-ini 安全漏洞
parse-ini is a INI configuration file parsing library developed by the individual developer at pein-consulting.de. Version 1.0.6 of parse-ini contains a security vulnerability, which stems from prototype pollution in the index.js file...
nodejs-ini: Prototype pollution via malicious INI file
A flaw was found in nodejs-ini. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context...
PT-2020-6064
Name of the Vulnerable Software and Affected Versions ini versions prior to 1.3.6 Description The issue is related to an uncontrolled modification of object prototype attributes in the ini library. This can be exploited by submitting a malicious INI file to an application that parses it with...