Lucene search
+L

15 matches found

OSV
OSV
•added 2026/08/04 2:52 p.m.•18 views

CLSA-2026-1774916743 TuxCare security update for parse-git-config (1 CVE)

TuxCare rebuilt parse-git-config to address 1 CVE. Fixed in 3.0.0-tuxcare.1...

7.5CVSS7.2AI score0.00473EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/08/04 12:00 a.m.•3 views

PT-2026-74236

TuxCare rebuilt parse-git-config to address 1 CVE. Fixed in 3.0.0-tuxcare.1...

5.9AI score
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2025-6799

Malicious code in bioql PyPI...

7.5CVSS7.4AI score0.00473EPSS
SaveExploits1References2
Veracode
Veracode
•added 2025/03/19 4:13 a.m.•22 views

Information Disclosure

parse-git-config is vulnerable to information disclosure. The vulnerability is due to improper handling of key expansion in the expandKeys function, allows an attacker to obtain sensitive information...

7.5CVSS6AI score0.00473EPSS
SaveExploits1References2Affected Software1
RedhatCVE
RedhatCVE
•added 2025/03/14 3:59 a.m.•18 views

CVE-2025-25975

A flaw was found in the parse-git-config package. Affected versions of this package allow an attacker to obtain sensitive information via the expandKeys function...

7.5CVSS6.2AI score0.00473EPSS
SaveExploits1References4
OSV
OSV
•added 2025/03/12 9:31 p.m.•27 views

GHSA-8G77-54RH-46HX Prototype Pollution Vulnerability in parse-git-config

An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function...

9.3CVSS7.1AI score0.00473EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2025/03/12 9:31 p.m.•24 views

Prototype Pollution Vulnerability in parse-git-config

An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function...

7.5CVSS6.5AI score0.00473EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2025/03/12 7:15 p.m.•28 views

CVE-2025-25975

An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function...

7.5CVSS0.00473EPSS
SaveExploits1References1
Mend
Mend
•added 2025/03/12 12:00 a.m.•2 views

CVE-2025-25975

An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function...

8.7CVSS0.00473EPSS
SaveExploits1References4
CVE
CVE
•added 2025/03/12 12:00 a.m.•83 views

CVE-2025-25975

The parse-git-config package (version 3.0.0 ) is vulnerable to Prototype Pollution via the expandKeys function. An attacker can exploit improper handling of key expansion to inject properties into the JavaScript Object.prototype chain. This can lead to denial of service (DoS) , remote code execut...

7.5CVSS6.1AI score0.00473EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/03/12 12:00 a.m.•35 views

CVE-2025-25975

An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function...

0.00473EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/12 12:00 a.m.•3 views

PT-2025-11119

Name of the Vulnerable Software and Affected Versions: parse-git-config version 3.0.0 Description: The issue allows an attacker to obtain sensitive information via the expandKeys function. Recommendations: For parse-git-config version 3.0.0, consider disabling the expandKeys function until a patc...

7.5CVSS0.00473EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/03/12 12:00 a.m.•12 views

parse-git-config 安全漏洞

parse-git-config is a library from the individual developer Jon Schlinkert. A security vulnerability exists in parse-git-config version 3.0.0, which stems from the expandKeys function that could lead to the disclosure of sensitive information...

7.5CVSS7.3AI score0.00473EPSS
SaveExploits1References1
OSV
OSV
•added 2025/03/12 12:00 a.m.•17 views

CVE-2025-25975

An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function...

7.5CVSS6.2AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/12 12:00 a.m.•4 views

CVE-2025-25975: Exposure of Sensitive Information to an Unauthorized Actor

An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function...

7.5CVSS7.2AI score0.00473EPSS
SaveExploits1References1
Rows per page
Query Builder