[MEDIUM] TinyEnv: Inline comments not stripped properly in .env values

PKSA-tn7z-9596-kh7x CVE-2025-58759 GHSA-72cm-7236-h43r

Affected version: >=1.0.9,<1.0.11

Reported by:
GitHub

[MEDIUM] TinyEnv: Missing .env file not required — may cause unexpected behavior

PKSA-78qj-g4s3-vxq4 CVE-2025-58758 GHSA-3j7m-5g4q-gfpc

Affected version: >=1.0.9,<1.0.11|<1.0.3

Reported by:
GitHub