GHSA-hp36-v28f-w3r4Published
flat-to-nested: Prototype pollution in flat-to-nested convert() via __proto__ parent/id key
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-55091 · CVE overview and exploitation status
cve-program · CVE-2026-55091
- https://github.com/joaonuno/flat-to-nested-js/security/advisories/GHSA-hp36-v28f-w3r4
- https://github.com/joaonuno/flat-to-nested-js/commit/680a5ebe1194edda16fa93baaa56ff14fe0e3d7f
- https://github.com/joaonuno/flat-to-nested-js/releases/tag/v1.1.2
euvd · EUVD-2026-77691
- https://github.com/joaonuno/flat-to-nested-js/security/advisories/GHSA-hp36-v28f-w3r4
- https://github.com/joaonuno/flat-to-nested-js/commit/680a5ebe1194edda16fa93baaa56ff14fe0e3d7f
- https://github.com/joaonuno/flat-to-nested-js/releases/tag/v1.1.2
nvd · CVE-2026-55091
- https://github.com/joaonuno/flat-to-nested-js/commit/680a5ebe1194edda16fa93baaa56ff14fe0e3d7f
- https://github.com/joaonuno/flat-to-nested-js/releases/tag/v1.1.2
- https://github.com/joaonuno/flat-to-nested-js/security/advisories/GHSA-hp36-v28f-w3r4
osv · GHSA-hp36-v28f-w3r4
Related changes
Linked by CVE identifierNo related changes are available here.