~ / search / GHSA-8g77-54rh-46hx

GHSA-8g77-54rh-46hx

Prototype Pollution Vulnerability in parse-git-config

Source: GitHub Advisory Database (reviewed) High CVE-2025-25975

Packages

EcosystemPackageAffectedFixed in
npm parse-git-config <= 3.0.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function.

References

External links from the advisory. They lead to third-party sites.