Skip to content
OpenAdvisories

Package · npm

component-flatten

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.3
    CVE-2019-10794

    component-flatten vulnerable to Prototype Pollution

    All versions of component-flatten are vulnerable to Prototype Pollution. The a function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.

    snyk component-flatten component-flatten npm