Description
All versions of package arr-flatten-unflatten up to and including version 1.1.4 are vulnerable to Prototype Pollution via the constructor.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 1.1.4
References
Could your website be exposed too?
SmartScanner can check your website for Prototype Pollution in arr-flatten-unflatten and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Prototype pollution in controlled-merge - CVE-2020-28268
- Prototype Pollution in gedi - CVE-2020-7727
- Prototype Pollution in tiny-conf - CVE-2020-7724
- Prototype Pollution in promisehelpers - CVE-2020-7723
You might also like:
See something that needs correcting? Let us knowUpdated January 27, 2023


