npm/flatted CVE-2026-32141: high 7.5, EPSS 0.84%
flatted vulnerable to unbounded recursion DoS in parse() revive phase
Action: Upgrade flatted to 3.4.0 or later.
npm i flatted@3.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.4.0 | - |
Fixed versions
| 3.4.0 |
Sources
- osv: GHSA-25h7-pfq9-p65f
- https://github.com/WebReflection/flatted/security/advisories/GHSA-25h7-pfq9-p65f
- https://nvd.nist.gov/vuln/detail/CVE-2026-32141
- https://github.com/WebReflection/flatted/pull/88
- https://github.com/WebReflection/flatted/commit/7eb65d857e1a40de11c47461cdbc8541449f0606
- https://github.com/WebReflection/flatted
CVE-2026-32141 · published · modified · JSON