npm/parse-git-config CVE-2025-25975: high 7.5, EPSS 0.47%

Prototype Pollution Vulnerability in parse-git-config

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-8g77-54rh-46hx
• https://nvd.nist.gov/vuln/detail/CVE-2025-25975
• https://github.com/jonschlinkert/parse-git-config/issues/14
• https://github.com/jonschlinkert/parse-git-config

CVE-2025-25975 · published 2025-03-12T21:31:29Z · modified 2025-03-20T19:27:20Z · JSON