CRITICAL9.8
GHSA-g78f-549w-c354
Prototype Pollution in multi-ini
Quick fix
GHSA-g78f-549w-c354 — multi-ini: upgrade to the fixed version with the command below.
npm install multi-ini@2.1.1Details
This affects the package multi-ini before 2.1.1. It is possible to pollute an object's prototype by specifying the proto object as part of an array.
Are you affected?
Enter the version of the package you're using.