https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T16:24:39.339925+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-182891 EUVD-2026-182891 2026-10-07T16:24:39.405915+00:00 EUVD-2026-182891 https://cve.radiocsirt.org/vuln/fkie_cve-2020-28460 fkie_cve-2020-28460 2026-10-07T16:24:39.405954+00:00

This affects the package multi-ini before 2.1.2. It is possible to pollute an object's prototype by specifying the constructor.proto object as part of an array. This is a bypass of CVE-2020-28448.

 https://cve.radiocsirt.org/vuln/ghsa-67mq-h2r9-rh2m GHSA-67mq-h2r9-rh2m — Prototype pollution in multi-ini 2026-10-07T16:24:39.405986+00:00

Affected: npm: multi-ini

This affects the package multi-ini before 2.1.2. It is possible to pollute an object's prototype by specifying the constructor.proto object as part of an array. This is a bypass of CVE-2020-28448.

 https://cve.radiocsirt.org/vuln/gsd-2020-28460 gsd-2020-28460 2026-10-07T16:24:39.406010+00:00 gsd-2020-28460