Description
npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js().
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | parse-ini | 1.0.6 | — | GHSA-x72j-hv9f-qqh4 |
Critical · 9.8
CVE-2025-63703
EUVD-2025-209729GHSA-x72j-hv9f-qqh4
parse-ini is vulnerable to Prototype Pollution in index.js()
Published May 7, 2026 · Updated May 8, 2026 · Assigned by mitre