Threats tagged 'ghsa-476f-8ccp-82xp'

The flat library up to version 6.0.1 has an uncontrolled resource allocation vulnerability in its unflatten() function. This flaw allows attackers to create very large sparse arrays by using unbounded numeric keys, such as a key like a.4294967294. When these arrays are processed with methods like forEach, spread, or JSON.stringify, they can block the Node.js event loop, causing denial of service.