CVE-2020-28449

This affects all versions of package decal. The vulnerability is in the set function...