← Back

Ini

ini

Vendor: Ini Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Debian
Ini Project
2Debian Linux
Ini
Jun 17, 2026
Dec 11, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further de...Show more
This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be exploited further depending on the context.Show less