CVE-2024-36574

A Prototype Pollution issue in flatten-json 1.0.1 allows an attacker to execute arbitrary code via module.exports.unflattenJSON flatten-json/index.js:42...

CVE-2024-36574

A Prototype Pollution issue in flatten-json 1.0.1 allows an attacker to execute arbitrary code via module.exports.unflattenJSON flatten-json/index.js:42...

CVE-2024-36574

The flatten-json library (version 1.0.1 ) is susceptible to a Prototype Pollution vulnerability. The root cause lies in the module.exports.unflattenJSON method located in flatten-json/index.js:42, where an attacker can exploit properties such as __proto__ or constructor.prototype to inject malici...