CVE-2026-119051

A flaw was found in flat. A remote attacker could trigger a Denial of Service DoS by submitting specially crafted input containing excessively large numeric keys to the unflatten function. This causes the library to allocate massive sparse arrays, exhausting system resources and blocking the...