Hughsk Flat vulnerabilities

• hughsk flat flat through 6.0.1 Denial of Service via unflatten() Numeric Array Index Keys CVE-2026-119051 8.2 HighOctober 29, 2026
• flat project flat hughsk flat index.js unflatten prototype pollution CVE-2020-36632 Fix available 6.3 MediumDecember 25, 2022