Multi Ini

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-28460 npm HIGH POC PATCH This Week

This affects the package multi-ini before 2.1.2. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

Prototype Pollution Authentication Bypass Multi Ini

NVD GitHub

CVSS 3.1

8.1

EPSS

1.5%

CVE-2020-28448 npm CRITICAL POC PATCH Act Now

This affects the package multi-ini before 2.1.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Prototype Pollution Information Disclosure Multi Ini

NVD GitHub

CVSS 3.1

9.8

EPSS

1.4%

CVE-2020-28460 npm

EPSS 2% CVSS 8.1

HIGH POC PATCH This Week

This affects the package multi-ini before 2.1.2. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

Prototype Pollution Authentication Bypass Multi Ini

NVD GitHub

CVE-2020-28448 npm

EPSS 1% CVSS 9.8

CRITICAL POC PATCH Act Now

Prototype Pollution Information Disclosure Multi Ini

NVD GitHub