Threats affecting pkg:github/inih

CVE-2025-71450 is a buffer under-read vulnerability in the ini_parse_stream() function of the inih library before revision r63. It occurs when processing an INI file or string containing an overlong line followed by an embedded NUL byte, allowing reading of memory just before the buffer. This can cause undefined behavior detected by memory sanitizers.