CVE-2025-63703

Critical

Published: 07/05/2026(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The npm package parse-ini version 1.0.6 is vulnerable to Prototype Pollution in the index.js() function.

Exploitation of this vulnerability may lead to unauthorized modifications of prototype objects, jeopardizing application integrity.

It is recommended to update the parse-ini package to the latest version to mitigate this vulnerability.

Original NVD description (English source)

npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js().