CVE-2025-63703

Description

npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js().

References

• https://gist.github.com/6en6ar/bdc8e0d472406ab98431f10273cbdbf3
• https://www.npmjs.com/package/parse-ini?activeTab=code