CVE-2025-63703
Prototype Pollution in parse-ini npm Package
Publication date: 2026-05-07
Last updated on: 2026-05-07
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The vulnerability in the npm package parse-ini version 1.0.6 is a Prototype Pollution issue occurring in the index.js file. Prototype Pollution allows an attacker to manipulate the prototype of base objects, potentially altering the behavior of the application that uses this package.
How can this vulnerability impact me? :
This vulnerability can impact you by allowing an attacker to inject or modify properties on JavaScript objects through prototype pollution. This can lead to unexpected behavior, security bypasses, or application crashes in software that depends on the parse-ini package.