CVE-2025-25975

creationtimestamp| type| source ---|---|--- 2025-03-12 19:41:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7366 2025-03-12 22:53:43+00:00| seen| https://t.me/cvedetector/20167 2025-08-13 13:26:34+00:00| seen| MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868...

CVE-2025-25975

An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function...

CVE-2025-25975

The parse-git-config package (version 3.0.0 ) is vulnerable to Prototype Pollution via the expandKeys function. An attacker can exploit improper handling of key expansion to inject properties into the JavaScript Object.prototype chain. This can lead to denial of service (DoS) , remote code execut...