flat-to-nested-js vulnerabilities

1 known vulnerability in flat-to-nested-js from Joaonuno. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  flat-to-nested-js: Improperly Controlled Modification of Dynamically-Determined Object Attributes

  CVE-2026-55091Sep 14, 2026Joaonuno

  flat-to-nested converts a hierarchy from a flat representation to a nested representation. Prior to 1.1.2, FlatToNested.prototype.convert in index.js uses attacker-influenced id and parent record fields directly as keys in the plain temp and pendingChildOf obj