Improper Input Validation
The arr-flatten-unflatten package is vulnerable to Prototype Pollution via the constructor.
Advisories for Npm/Arr-Flatten-Unflatten package
2020
The arr-flatten-unflatten package is vulnerable to Prototype Pollution via the constructor.