Skip to main content
← Packagist

datahihi1/tiny-env

2 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 2 medium
Registry
Packagist

Advisories 2

  • CVE-2025-58759Medium 5.1

    TinyEnv: Inline comments not stripped properly in .env values

    Affected: from 1.0.9, fixed in 1.0.11.

  • CVE-2025-58758Medium 5.1

    TinyEnv: Missing .env file not required — may cause unexpected behavior

    Affected: fixed in 1.0.3; from 1.0.9, fixed in 1.0.11.