1113 matches found
Improper Check or Handling of Exceptional Conditions
Overview datahihi1/tiny-env is a simple environment variable loader for PHP applications Affected versions of this package are vulnerable to Improper Check or Handling of Exceptional Conditions due to the loading of environment variables without requiring the .env file to exist. An attacker can...
CVE-2025-58759 TinyEnv: Inline comments not stripped properly in .env values
TinyEnv is an environment variable loader for PHP applications. In versions 1.0.9 and 1.0.10, TinyEnv did not properly strip inline comments inside .env values. This could lead to unexpected behavior or misconfiguration, where variables contain unintended characters including or comment text...
CVE-2025-58759 TinyEnv: Inline comments not stripped properly in .env values
TinyEnv is an environment variable loader for PHP applications. In versions 1.0.9 and 1.0.10, TinyEnv did not properly strip inline comments inside .env values. This could lead to unexpected behavior or misconfiguration, where variables contain unintended characters including or comment text...
CVE-2025-58758
CVE-2025-58758 affects TinyEnv, a PHP environment-variable loader. Versions 1.0.1, 1.0.2, 1.0.9, and 1.0.10 do not require the .env file to exist when loading variables, enabling the application to run with missing or insecure defaults. The issue has been fixed in version 1.0.11. Mitigation provi...
Malicious code in auth-dotenv-halley-prettier-stylelint (npm)
The package auth-dotenv-halley-prettier-stylelint was found to contain malicious code...
Malicious code in commitlint-pm2-proxima-dotenv-safe (npm)
The package commitlint-pm2-proxima-dotenv-safe was found to contain malicious code...
Malicious code in cygnus-dotenv-parse-variables-pm2-sequelize (npm)
The package cygnus-dotenv-parse-variables-pm2-sequelize was found to contain malicious code...
Malicious code in dotenv-jasmine-cosmicweb-stream (npm)
The package dotenv-jasmine-cosmicweb-stream was found to contain malicious code...
Malicious code in dotenv-parse-variables-mira-nova-ophiuchus (npm)
The package dotenv-parse-variables-mira-nova-ophiuchus was found to contain malicious code...
Malicious code in dotenv-parse-variables-cluster-mongoose-xanthus (npm)
The package dotenv-parse-variables-cluster-mongoose-xanthus was found to contain malicious code...
Malicious code in dotenv-parse-variables-oauth-pavo-meteor (npm)
The package dotenv-parse-variables-oauth-pavo-meteor was found to contain malicious code...
Malicious code in dotenv-parse-variables-playwright-pyxis-geochronology (npm)
The package dotenv-parse-variables-playwright-pyxis-geochronology was found to contain malicious code...
Malicious code in dotenv-parse-variables-typeorm-spectron-fusion (npm)
The package dotenv-parse-variables-typeorm-spectron-fusion was found to contain malicious code...
Malicious code in dotenv-safe-exoplanetology-exobiology-virgo (npm)
The package dotenv-safe-exoplanetology-exobiology-virgo was found to contain malicious code...
Malicious code in dotenv-safe-fusion-norma-joviology (npm)
The package dotenv-safe-fusion-norma-joviology was found to contain malicious code...
Malicious code in dotenv-safe-polaris-paleoanthropology-filament (npm)
The package dotenv-safe-polaris-paleoanthropology-filament was found to contain malicious code...
Malicious code in dotenv-safe-sedna-procyon-halley (npm)
The package dotenv-safe-sedna-procyon-halley was found to contain malicious code...
Malicious code in dotenv-safe-whitedwarf-castor-magnetar (npm)
The package dotenv-safe-whitedwarf-castor-magnetar was found to contain malicious code...