ini vulnerabilities

CVEs whose affected-version data names the ini package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2020-7788High· 7.3

5y ago

This affects the package ini before 1.3.6

This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the co…

▾ Twilightini_project · iniEPSS 3.7%via NVD