flat-to-nested-js vulnerabilities

CVEs whose affected-version data names the flat-to-nested-js package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-55091High· 7.5

1w ago

flat-to-nested converts a hierarchy from a flat representation to a nested representation

flat-to-nested converts a hierarchy from a flat representation to a nested representation. Prior to 1.1.2, FlatToNested.prototype.convert in index.js uses attacker-influenced id and parent record fields directly as keys in the plain temp…

▾ Twilightjoaonuno · flat-to-nested-jsEPSS 0.36%via NVD