Launchpad.net

CVE 2020-28273

Prototype pollution vulnerability in 'set-in' versions 1.0.0 through 2.0.0 allows attacker to cause a denial of service and may lead to remote code execution.

See the CVE page on Mitre.org for more details.