Approved changes feed: RSS · Atom

cpe:2.3:a:alizeait:unflatto:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAlizeait (90fd4e46-69ee-5c57-a20b-942212d230ed)
ProductUnflatto (adb372fe-7caf-5df7-b10b-d95170a41809)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/alizeait/unflatto purl2cpe 2026-06-01 10:16:44.371829
pkg:npm/%40alizeait/unflatto purl2cpe 2026-06-01 10:16:44.371832

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-38988 vulnerable 2026-06-08 06:41:48.658615 Details available
alizeait unflatto <= 1.0.2 was discovered to contain a prototype pollution via the method exports.unflatto at /dist/index.js. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
Published: 2025-03-28T00:00:00.000Z
Updated: 2025-04-01T18:52:26.879Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.