Ini Project Ini vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ini Project Ini: 1 record(s), with affected versions and fixes.
cpe:2.3:a:ini_project:ini

CVE-2020-7788 Critical · 9.8 CWE-1321 Dec 11, 2020

Prototype Pollution

This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.