Skip to content

CVE-2025-63703

CVE-2025-63703

This page contains facts from public vulnerability sources. Check the original advisory before updating.

npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js().

CVSS 9.8 · Critical · EPSS 0.4%

Published: 2026-05-07T00:00:00.000Z
Updated: 2026-05-08T22:30:22.892Z

Stack: node

Affected products and versions

n/a
Versions
- n/a: Affected
No fix published
parse-ini npm
Versions
- 1.0.6
No fix published

Original sources

Check your server →