CVE-2020-28283

CVE-2020-28283 affects the libnested package; versions before 1.5.2 are vulnerable to Prototype Pollution through the set function in index.js, enabling denial of service and potentially remote code execution. The issue stems from an incomplete fix and is addressed by upgrading libnested to 1.5.2...