An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-25975.json"