Approved changes feed: RSS · Atom

cpe:2.3:a:jonschlinkert:parse-git-config:3.0.0:*:*:*:*:*:*:*

part: a version: 3.0.0 update: *

VendorJonschlinkert (ddae82b9-e2e5-5c5d-a403-dbc01aba5aef)
ProductParse Git Config (2d0199c8-c0a8-5b18-93ed-ab0d26438310)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jonschlinkert/parse-git-config purl2cpe 2026-06-01 10:12:15.324793
pkg:maven/org.webjars.npm/parse-git-config purl2cpe 2026-06-01 10:12:15.324797
pkg:npm/parse-git-config purl2cpe 2026-06-01 10:12:15.324801

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-25975 vulnerable 2026-06-08 07:12:51.426749 Details available
An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function
Published: 2025-03-12T00:00:00.000Z
Updated: 2025-03-19T18:51:42.398Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.