CVE-2020-28441
1 advisory.
npm/conf-cfg-ini CVE-2020-28441: critical 9.8, EPSS 1.22%
conf-cfg-ini Prototype Pollution via malicious INI file before v1.2.2
Action: Upgrade conf-cfg-ini to 1.2.2 or later.
npm i conf-cfg-ini@1.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.2 | - |
Fixed versions
| 1.2.2 |
Sources
- osv: GHSA-m6mg-jvjf-w44x
- https://nvd.nist.gov/vuln/detail/CVE-2020-28441
- https://github.com/loge5/conf-cfg-ini/commit/3a88a6c52c31eb6c0f033369eed40aa168a636ea
- https://github.com/loge5/conf-cfg-ini/commit/ecd878f8f7398e765739e989c7fe7cc052308947
- https://github.com/loge5/conf-cfg-ini
- https://security.snyk.io/vuln/SNYK-JS-CONFCFGINI-1048973
CVE-2020-28441 · published · modified · JSON