CVE-2020-28460
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2020-28460
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-28460.json
- Aliases
-
- GHSA-67mq-h2r9-rh2m
- SNYK-JS-MULTIINI-1053229
- Published
- 2020-12-22T13:15:12Z
- Modified
- 2023-11-29T08:27:59.099697Z
- Details
-
This affects the package multi-ini before 2.1.2. It is possible to pollute an object's prototype by specifying the constructor.proto object as part of an array. This is a bypass of CVE-2020-28448.
- References