CVE-2020-28448

Publication date

2020-12-22 13:05:19

Family

snyk

State

PUBLISHED

Description

This affects the package multi-ini before 2.1.1. It is possible to pollute an objects prototype by specifying the proto object as part of an array.