Ini Project vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Ini Project products: 1 record(s), with severity, exploitation and fixes.

Ini 1

Exploited only (KEV) →

CVE-2020-7788 Critical · 9.8 CWE-1321 Dec 11, 2020

Prototype Pollution

This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.