CVE-2025-25975

An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function

Score

CVSS 3.1 7.5 High

Status

Analyzed - cve@mitre.org

Published

2025-03-12

Last modified

2025-03-19

Weaknesses

CWE-200

Affected products

• Parse-git-config (Jonschlinkert)

References

• https://github.com/jonschlinkert/parse-git-config/issues/14