CVE-2020-28462

CVE-2020-28462 is a critical prototype pollution vulnerability affecting all versions of the ion-parser package. An attacker can exploit this by submitting a malicious INI file, leading to prototype pollution within the parsing application, which can have severe consequences including full compromise (CVSS 9.8). While the vulnerability is critical and easily exploitable over the network with no user interaction, there is currently no evidence of active exploitation, public exploit code, or significant community discussion.