CVE-2020-28460

CVE-2020-28460 is a prototype pollution vulnerability affecting the multi-ini package prior to version 2.1.2, allowing an attacker to modify an object's prototype by manipulating array inputs. This vulnerability carries a high severity CVSS score of 8.1, indicating a network-based attack with high impact on confidentiality, integrity, and availability, albeit with high attack complexity. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.