Description
ini-parser through 0.0.2 is vulnerable to Prototype Pollution.The library could be tricked into adding or modifying properties of Object.prototype using a '__proto__' payload.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| rawiroaisen | ini-parser | unspecified – ≤ 0.0.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | ini-parser | <= 0.0.2 | — | GHSA-96r7-mrqf-jhcc |