CVE-2025-25975

A flaw was found in the parse-git-config package. Affected versions of this package allow an attacker to obtain sensitive information via the expandKeys function...

Prototype Pollution Vulnerability in parse-git-config

An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function...

GHSA-8G77-54RH-46HX Prototype Pollution Vulnerability in parse-git-config

An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function...

0xrtest (1.0.0), 51xtong (>=1.0.2, <=1.0.8) +1090 more potentially affected by CVE-2025-25975 via parse-git-config (3.0.0)

parse-git-config NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on parse-git-config and may be impacted: - 0xrtest 1.0.0 - 51xtong =1.0.2, =0.1.0, =0.0.1, =0.2.1, =0.0.2, =0.0.2, =0.0.11, =1.0.0, =11.1.0, =0.0.1, =0.0.1, =0.1.2 and more...

0xrtest (1.0.0), 51xtong (>=1.0.2, <=1.0.8) +1090 more potentially affected by CVE-2025-25975 via parse-git-config (3.0.0)

parse-git-config NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on parse-git-config and may be impacted: - 0xrtest 1.0.0 - 51xtong =1.0.2, =0.1.0, =0.0.1, =0.2.1, =0.0.2, =0.0.2, =0.0.11, =1.0.0, =11.1.0, =0.0.1, =0.0.1, =0.1.2 and more...

Prototype Pollution

Overview org.webjars.npm:parse-git-config is a Parse .git/config into a JavaScript object. sync or async. Affected versions of this package are vulnerable to Prototype Pollution via the expandKeys function. An attacker can obtain sensitive information by exploiting the improper handling of key...

CVE-2025-25975

An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function...

CVE-2025-25975

An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function...

PT-2025-11119

Name of the Vulnerable Software and Affected Versions: parse-git-config version 3.0.0 Description: The issue allows an attacker to obtain sensitive information via the expandKeys function. Recommendations: For parse-git-config version 3.0.0, consider disabling the expandKeys function until a patc...

CVE-2025-25975

The parse-git-config package (version 3.0.0 ) is vulnerable to Prototype Pollution via the expandKeys function. An attacker can exploit improper handling of key expansion to inject properties into the JavaScript Object.prototype chain. This can lead to denial of service (DoS) , remote code execut...

PT-2025-27690

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A bug in the Linux kernel has been resolved, specifically an out-of-bounds issue in the usbhid parse function. The struct hid descriptor has been updated to reflect the mandatory and...

parse-git-config security vulnerability

parse-git-config is a library from the individual developer Jon Schlinkert. A security vulnerability exists in parse-git-config version 3.0.0, which stems from the expandKeys function that could lead to the disclosure of sensitive information...

CVE-2025-25975: Exposure of Sensitive Information to an Unauthorized Actor

An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function...

CVE-2025-25975

An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function...

CVE-2025-25975

An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function...

PT-2025-14589

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises when a command stream passed from userspace via an ioctl call to the radeon vce cs parse function is crafted in a way that the first command to execute is to encode case...

binutils:fuzz_objdump_safe: Heap-buffer-overflow in _bfd_elf_parse_attributes

Detailed Report: https://oss-fuzz.com/testcase?key=6601247063080960 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjdumpsafe Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x5020000000b7 Crash State: bfdelfparseattributes...

Medium: ecs-init

Issue Overview: An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service. CVE-2024-45338 Affected Packages: ecs-init Note: This advisory is applicable to Amazon...

Low: docker

Issue Overview: golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors...

Medium: php8.3

Issue Overview: The upstream advisory describes this issue as follows: A memory-related vulnerability in PHP's filter handling system, particularly when processing input with convert.quoted-printable-decode filters, leads to a segmentation fault. This vulnerability is triggered through specific...