critical9.8
CVE-2025-63703
npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js().
Impact
npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js().
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | parse-ini | = 1.0.6 | none recorded |