Threats affecting pkg:npm/flat

flat versions up to and including 6.0.1 have a resource allocation vulnerability in the unflatten() function. This flaw allows attackers to create very large sparse arrays by using unbounded numeric keys, such as a.4294967294. Exploiting this can cause operations like forEach, spread, or JSON.stringify to block the Node.js event loop, leading to denial of service.