PT-2026-26465

--- Summary The parse function in flatted can use attacker-controlled string values from the parsed JSON as direct array index keys, without validating that they are numeric. Since the internal input buffer is a JavaScript Array, accessing it with the key " proto " returns Array.prototype via the...

Code injection

This affects all versions of package x-assign. The global proto object can be polluted using the proto object...