CVE-2026-55091
1 advisory.
npm/flat-to-nested CVE-2026-55091: high 7.5
flat-to-nested: Prototype pollution in flat-to-nested convert() via __proto__ parent/id key
Action: Upgrade flat-to-nested to 1.1.2 or later.
npm i flat-to-nested@1.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.2 | - |
Fixed versions
| 1.1.2 |
Sources
- osv: GHSA-hp36-v28f-w3r4
- https://github.com/joaonuno/flat-to-nested-js/security/advisories/GHSA-hp36-v28f-w3r4
- https://github.com/joaonuno/flat-to-nested-js/commit/680a5ebe1194edda16fa93baaa56ff14fe0e3d7f
- https://github.com/joaonuno/flat-to-nested-js
CVE-2026-55091 · published · modified · JSON