CVE-2023-26135

CVE-2023-26135 is a critical Prototype Pollution vulnerability affecting all versions of the flatnest package. This flaw, residing in the nest() function within flatnest/nest.js, allows an unauthenticated attacker to remotely execute arbitrary code, compromise data integrity, and cause denial of service. While no public exploits or active exploitation have been confirmed, the vulnerability has a CVSS score of 9.8 (Critical) and significant community discussion, indicating potential for future exploitation. Organizations using flatnest should prioritize patching or mitigation strategies.