← All advisories

Critical severity9.8NVD Advisory· Published May 7, 2026· Updated May 8, 2026

CVE-2025-63703

CVE-2025-63703

Description

npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js().

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

ghsa-coords
pkg:npm/parse-ini

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-x72j-hv9f-qqh4ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-63703ghsaADVISORY
gist.github.com/6en6ar/bdc8e0d472406ab98431f10273cbdbf3nvdWEB
www.npmjs.com/package/parse-ininvdWEB

News mentions

0

No linked articles in our index yet.