Lucene search
K

17 matches found

RedhatCVE
RedhatCVE
added 2026/05/09 2:21 a.m.6 views

CVE-2025-63703

npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js...

9.8CVSS5.8AI score0.00416EPSS
Exploits0References1
vulnersOsv
vulnersOsv
added 2026/05/07 6:30 p.m.5 views

artemproject2 (>=1.2.1 <=1.8.8) potentially affected by CVE-2025-63703 via parse-ini (=1.0.6)

parse-ini NPM version =1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on parse-ini and may be impacted: - artemproject2 =1.2.1, =1.8.8 Source cves: CVE-2025-63703 Source advisory: SNYK:JS-PARSEINI-16787377...

9.8CVSS5.4AI score0.00416EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2026/05/07 6:30 p.m.3 views

artemproject2 (>=1.2.1 <=1.8.8) potentially affected by CVE-2025-63703 via parse-ini (=1.0.6)

parse-ini NPM version =1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on parse-ini and may be impacted: - artemproject2 =1.2.1, =1.8.8 Source cves: CVE-2025-63703 Source advisory: OSV:GHSA-X72J-HV9F-QQH4...

9.8CVSS5.8AI score0.00416EPSS
Exploits0
Patchstack
Patchstack
added 2026/05/07 6:30 p.m.5 views

NPM: parse-ini is vulnerable to Prototype Pollution in index.js()

NPM: parse-ini is vulnerable to Prototype Pollution in index.js vulnerability discovered by ? in WordPress Npm parse-ini versions 1.0.6...

9.8CVSS5.8AI score0.00416EPSS
Exploits0References4Affected Software1
Snyk
Snyk
added 2026/05/07 6:30 p.m.8 views

Prototype Pollution

Overview parse-ini is a Parse ini file to get the content and variables of the ini file as node object. Affected versions of this package are vulnerable to Prototype Pollution via the index.js file. An attacker can manipulate object properties and potentially execute arbitrary code or alter...

9.8CVSS6.5AI score0.00416EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/07 6:30 p.m.7 views

EUVD-2025-209729

npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js...

5.8AI score0.00416EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2026/05/07 6:30 p.m.8 views

parse-ini is vulnerable to Prototype Pollution in index.js()

npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js...

9.8CVSS5.8AI score0.00416EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2026/05/07 6:30 p.m.4 views

GHSA-X72J-HV9F-QQH4 parse-ini is vulnerable to Prototype Pollution in index.js()

npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js...

9.8CVSS5.8AI score0.00416EPSS
Exploits0References3
NVD
NVD
added 2026/05/07 4:16 p.m.9 views

CVE-2025-63703

npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js...

9.8CVSS0.00416EPSS
Exploits0References2
CVE
CVE
added 2026/05/07 12:0 a.m.11 views

CVE-2025-63703

CVE-2025-63703 affects the npm package parse-ini v1.0.6 and is a Prototype Pollution vulnerability in index.js(). The accompanying metrics indicate a CRITICAL impact (CVSS 3.1: 9.8) with NETWORK attack vector, no privileges required, no user interaction, and high impact on confidentiality, integr...

9.8CVSS5.8AI score0.00416EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/05/07 12:0 a.m.4 views

CVE-2025-63703

npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js...

5.8AI score0.00416EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/07 12:0 a.m.8 views

PT-2026-38452

Name of the Vulnerable Software and Affected Versions parse-ini version 1.0.6 Description The npm package is subject to Prototype Pollution within the index.js function. Prototype Pollution occurs when an attacker can manipulate the prototype of an object, potentially leading to altered applicati...

9.8CVSS5.8AI score0.00416EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/07 12:0 a.m.5 views

CVE-2025-63703

npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js...

5.8AI score0.00416EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/07 12:0 a.m.6 views

parse-ini 安全漏洞

parse-ini is a INI configuration file parsing library developed by the individual developer at pein-consulting.de. Version 1.0.6 of parse-ini contains a security vulnerability, which stems from prototype pollution in the index.js file...

9.8CVSS5.8AI score0.00416EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/07 12:0 a.m.30 views

CVE-2025-63703

npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js...

0.00416EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/14 10:29 p.m.1 views

EUVD-2026-22704

October Rain has Environment Variable Exfiltration via INI Parser Interpolation...

4.9CVSS5.8AI score0.00326EPSS
Exploits0References2
Fedora
Fedora
added 2018/09/11 2:56 p.m.17 views

[SECURITY] Fedora 27 Update: iniparser-4.0-7.20160821git.fc27

iniParser is an ANSI C library to parse "INI-style" files, often used to hold application configuration information...

1.9AI score
Exploits0
Rows per page
Query Builder