4 matches found
CLSA-2026-1775608289 TuxCare security update for ini (1 CVE)
TuxCare rebuilt ini to address 1 CVE. Fixed in 1.3.3-tuxcare.1...
parse-ini 安全漏洞
parse-ini is a INI configuration file parsing library developed by the individual developer at pein-consulting.de. Version 1.0.6 of parse-ini contains a security vulnerability, which stems from prototype pollution in the index.js file...
nodejs-ini: Prototype pollution via malicious INI file
A flaw was found in nodejs-ini. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context...
PT-2020-6064 · Ini +6 · Ini +6
Name of the Vulnerable Software and Affected Versions: ini versions prior to 1.3.6 Description: The issue is related to an uncontrolled modification of object prototype attributes in the ini library. This can be exploited by submitting a malicious INI file to an application that parses it with...