Skip to content
OpenAdvisories

Product · datahihi1

tiny-env

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2025-58759

    TinyEnv: Inline comments not stripped properly in .env values

    TinyEnv is an environment variable loader for PHP applications. In versions 1.0.9 and 1.0.10, TinyEnv did not properly strip inline comments inside .env values. This could lead to unexpected behavior or misconfiguration, where variables contain unintended cha…

    datahihi1 tiny-env datahihi1/tiny-env Packagist
  • Medium 5.1
    CVE-2025-58758

    TinyEnv: Missing .env file not required — may cause unexpected behavior

    TinyEnv is an environment variable loader for PHP applications. In versions 1.0.1, 1.0.2, 1.0.9, and 1.0.10, TinyEnv did not require the `.env` file to exist when loading environment variables. This could lead to unexpected behavior where the application sile…

    datahihi1 tiny-env datahihi1/tiny-env Packagist