CVE-2025-25975

creationtimestamp| type| source ---|---|--- 2025-03-12 19:41:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7366 2025-03-12 22:53:43+00:00| seen| https://t.me/cvedetector/20167 2025-08-13 13:26:34+00:00| seen| MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868...

CVE-2025-25975

CVE-2025-25975 affects the JavaScript library parse-git-config v3.0.0. The issue is information disclosure caused by improper handling of key expansion in the expandKeys function, leading to potential leakage of sensitive data. Multiple sources (including Veracode and Red Hat advisories) describe...

CVE-2025-25975

An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function...