{"action":"Upgrade flat to 1.6.2 or later.","affected":[{"fixed":"1.6.2","introduced":"0"},{"fixed":"2.0.2","introduced":"2.0.0"},{"fixed":"3.0.1","introduced":"3.0.0"},{"fixed":"4.0.2","introduced":"4.0.0"},{"fixed":"5.0.1","introduced":"5.0.0"}],"component":"flat","cve_ids":["CVE-2020-36632"],"ecosystem":"npm","epss":0.01211,"exploited":false,"fixed_versions":["1.6.2","2.0.2","3.0.1","4.0.2","5.0.1"],"ghsa_id":"GHSA-2j2x-2gpw-g8fm","id":"tcs_01M5KET9MTBY1XVWHNQV7Z792W","modified_at":"2026-02-03T03:16:54.193415Z","published_at":"2022-12-25T21:30:22Z","references":["https://osv.dev/vulnerability/GHSA-2j2x-2gpw-g8fm","https://nvd.nist.gov/vuln/detail/CVE-2020-36632","https://github.com/hughsk/flat/issues/105","https://github.com/hughsk/flat/pull/106","https://github.com/hughsk/flat/commit/20ef0ef55dfa028caddaedbcb33efbdb04d18e13","https://github.com/hughsk/flat","https://github.com/hughsk/flat/compare/3.0.0...3.0.1","https://github.com/hughsk/flat/compare/4.1.0...4.1.1","https://github.com/hughsk/flat/compare/v1.6.0...1.6.2","https://github.com/hughsk/flat/compare/v2.0.1...2.0.2","https://github.com/hughsk/flat/releases/tag/5.0.1","https://vuldb.com/?ctiid.216777","https://vuldb.com/?id.216777"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-2j2x-2gpw-g8fm","url":"https://osv.dev/vulnerability/GHSA-2j2x-2gpw-g8fm"}],"summary":"flat vulnerable to Prototype Pollution"}