Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:multi-ini:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductMulti Ini (d2f94fe4-299d-5a5e-8e22-1b468f621f0f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-28460 vulnerable 2026-06-08 05:23:56.102033 Prototype Pollution
MEDIUM (5.6)
This affects the package multi-ini before 2.1.2. It is possible to pollute an object's prototype by specifying the constructor.proto object as part of an array. This is a bypass of CVE-2020-28448.
Published: 2020-12-22T13:05:14.404Z
Updated: 2024-09-17T02:56:56.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28448 vulnerable 2026-06-08 05:23:56.075375 Prototype Pollution
MEDIUM (5.6)
This affects the package multi-ini before 2.1.1. It is possible to pollute an object's prototype by specifying the proto object as part of an array.
Published: 2020-12-22T13:05:19.967Z
Updated: 2024-09-16T19:36:53.039Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.