{"vulnerability": "CVE-2020-28460", "sightings": [{"uuid": "0c209c13-0db9-43be-bf3f-0ba4ebf31ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28460", "type": "seen", "source": "https://t.me/cibsecurity/21155", "content": "\u203c CVE-2020-28460 \u203c\n\nThis affects the package multi-ini before 2.1.2. It is possible to pollute an object's prototype by specifying the constructor.proto object as part of an array. This is a bypass of CVE-2020-28448.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-22T16:52:59.000000Z"}, {"uuid": "5ba382fe-5eaa-4503-94a6-2505391c5cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2020-28460", "type": "seen", "source": "https://t.me/makrushin/183", "content": "", "creation_timestamp": "2026-07-17T10:00:04.631511Z"}, {"uuid": "2f514a61-026d-4a83-9692-4be24116ef2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2020-28460", "type": "seen", "source": "https://t.me/makrushin/183", "content": "", "creation_timestamp": "2026-07-18T00:00:26.779327Z"}]}