CVE-2020-7788

CVE-2020-7788 affects the ini package before 1.3.6. An attacker can submit a malicious INI file parsed by ini.parse, polluting the application’s prototype and potentially enabling further exploitation depending on context. Remediation: upgrade to ini 1.3.6 or newer.