CVE-2026-119051

The flat library (versions through 6.0.1 ) contains an uncontrolled resource allocation vulnerability within the unflatten() function. The root cause is the processing of unbounded numeric keys, which allows an attacker to create massive sparse arrays. This can result in a Denial of Service (DoS)...