quernest/arr-flatten-unflatten

🍓 non-recursive method of flattening an array or arrays and unflattening the result

Hi there, I'm Anton - aka Quernest

• 🧑‍💻 Software Developer since 2015, Front-End most time
• 💻 Write code to satisfy myself solve problems

MOTTO

Make everything as simple as possible, but not simpler. - Albert Einstein

arr-flatten-unflatten's Issues

Prototype Pollution

This module has prototype pollution vulnerablity
and it can make logic vulnerability in application use this

const { unflatten } = require("arr-flatten-unflatten");

unflatten({'__proto__[polluted]': true});
console.log(polluted); // true

Who to contact for security issues

Hey there!

I belong to an open source security research community, and a member (@Sampaguitas) has found an issue, but doesn’t know the best way to disclose it.

If not a hassle, might you kindly add a SECURITY.md file with an email, or another contact method? GitHub recommends this best practice to ensure security issues are responsibly disclosed, and it would serve as a simple instruction for security researchers in the future.

Thank you for your consideration, and I look forward to hearing from you!

(cc @huntr-helper)