CVE-2020-28460
1 advisory.
npm/multi-ini CVE-2020-28460: medium 5.6, EPSS 1.54%
Prototype pollution in multi-ini
Action: Upgrade multi-ini to 2.1.2 or later.
npm i multi-ini@2.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.2 | - |
Fixed versions
| 2.1.2 |
Sources
- osv: GHSA-67mq-h2r9-rh2m
- https://nvd.nist.gov/vuln/detail/CVE-2020-28460
- https://github.com/evangelion1204/multi-ini/commit/6b2212b2ce152c19538a2431415f72942c5a1bde
- https://snyk.io/vuln/SNYK-JS-MULTIINI-1053229
CVE-2020-28460 · published · modified · JSON