1044 matches found
CVE-2025-58759 TinyEnv: Inline comments not stripped properly in .env values
TinyEnv is an environment variable loader for PHP applications. In versions 1.0.9 and 1.0.10, TinyEnv did not properly strip inline comments inside .env values. This could lead to unexpected behavior or misconfiguration, where variables contain unintended characters including or comment text...
CVE-2025-58758
CVE-2025-58758 affects TinyEnv, a PHP environment-variable loader. Versions 1.0.1, 1.0.2, 1.0.9, and 1.0.10 do not require the .env file to exist when loading variables, enabling the application to run with missing or insecure defaults. The issue has been fixed in version 1.0.11. Mitigation provi...
Malicious code in metalsmith-node-config-dotenv-safe-bellatrix (npm)
The package metalsmith-node-config-dotenv-safe-bellatrix was found to contain malicious code...
Malicious code in dotenv-parse-variables-cluster-mongoose-xanthus (npm)
The package dotenv-parse-variables-cluster-mongoose-xanthus was found to contain malicious code...
Malicious code in semantic-release-dotenv-safe-commitlint-node-sass (npm)
The package semantic-release-dotenv-safe-commitlint-node-sass was found to contain malicious code...
Malicious code in husky-xenos-lint-staged-dotenv (npm)
The package husky-xenos-lint-staged-dotenv was found to contain malicious code...
Malicious code in style-loader-impulse-acamar-dotenv-parse-variables (npm)
The package style-loader-impulse-acamar-dotenv-parse-variables was found to contain malicious code...
Malicious code in equinox-rate-limiter-auriga-dotenv-parse-variables (npm)
The package equinox-rate-limiter-auriga-dotenv-parse-variables was found to contain malicious code...
Malicious code in rollup-janus-dotenv-soap (npm)
The package rollup-janus-dotenv-soap was found to contain malicious code...
Malicious code in mongoose-quark-configstore-dotenv (npm)
The package mongoose-quark-configstore-dotenv was found to contain malicious code...
Malicious code in dotenv-safe-sedna-procyon-halley (npm)
The package dotenv-safe-sedna-procyon-halley was found to contain malicious code...
Malicious code in run-script-zephyr-dotenv-safe-bionics (npm)
The package run-script-zephyr-dotenv-safe-bionics was found to contain malicious code...
MAL-2025-44054 Malicious code in dotenv-parse-variables-oauth-pavo-meteor (npm)
The package dotenv-parse-variables-oauth-pavo-meteor was found to contain malicious code...
MAL-2025-45901 Malicious code in rollup-janus-dotenv-soap (npm)
The package rollup-janus-dotenv-soap was found to contain malicious code...
MAL-2025-44147 Malicious code in equinox-rate-limiter-auriga-dotenv-parse-variables (npm)
The package equinox-rate-limiter-auriga-dotenv-parse-variables was found to contain malicious code...
Malicious code in magnetosphere-dotenv-safe-optimize-css-assets-webpack-plugin-mineralogy (npm)
The package magnetosphere-dotenv-safe-optimize-css-assets-webpack-plugin-mineralogy was found to contain malicious code...
Malicious code in quasar-ophiuchus-heka-dotenv (npm)
The package quasar-ophiuchus-heka-dotenv was found to contain malicious code...
Malicious code in gravitationalwave-corvus-dotenv-parse-variables-xo (npm)
The package gravitationalwave-corvus-dotenv-parse-variables-xo was found to contain malicious code...