CVE-2025-63703
1 advisory.
npm/parse-ini CVE-2025-63703: critical 9.8, EPSS 0.42%
parse-ini is vulnerable to Prototype Pollution in index.js()
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-x72j-hv9f-qqh4
- https://nvd.nist.gov/vuln/detail/CVE-2025-63703
- https://gist.github.com/6en6ar/bdc8e0d472406ab98431f10273cbdbf3
- https://www.npmjs.com/package/parse-ini?activeTab=code
CVE-2025-63703 · published · modified · JSON