Vulnerability	Vulnerable Version
M Prototype Pollution flat is a Take a nested Javascript object and flatten it, or unflatten an object with delimited keys Affected versions of this package are vulnerable to Prototype Pollution. PoC `var unflatten = require('flat').unflatten; unflatten({ '__proto__.polluted': true }); console.log(polluted); // true` How to fix Prototype Pollution? Upgrade `flat` to version 5.0.2, 4.1.1, 3.0.1, 2.0.2, 1.6.2 or higher.	>=5.0.0 <5.0.2>=4.0.0 <4.1.1>=3.0.0 <3.0.1>=2.0.0 <2.0.2<1.6.2

flat is a Take a nested Javascript object and flatten it, or unflatten an object with delimited keys

Affected versions of this package are vulnerable to Prototype Pollution.

var unflatten = require('flat').unflatten;

unflatten({
'__proto__.polluted': true
});

console.log(polluted); // true

How to fix Prototype Pollution?

Upgrade flat to version 5.0.2, 4.1.1, 3.0.1, 2.0.2, 1.6.2 or higher.

>=5.0.0 <5.0.2>=4.0.0 <4.1.1>=3.0.0 <3.0.1>=2.0.0 <2.0.2<1.6.2