Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
hughsk/flat
master @ 1d68e1d
2
Fixes
1
CVEs
HIGH
Peak severity
Highlights
Prototype Pollution: 2 prior fixes. Scrutinize any change in this area.
index.js: most-fixed (2 issues). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Prototype Pollution: Attackers can manipulate input keys (e.g., '__proto__') to modify the base Object prototype, leading to remote code execution or application denial of service if unflattening is not strictly validated.
Prototype Pollution: Recursive calls within 'unflatten' can drop configuration options, such as safe protection rules, allowing deeply nested keys to bypass key blocklist checks.