CVE-2021-25927: Safe-Flat Project Safe-Flat

Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days.

Prototype pollution vulnerability in 'safe-flat' versions 2.0.0 through 2.0.1 allows an attacker to cause a denial of service and may lead to remote code execution.

Affected products

• Safe-Flat Project Safe-Flat: from 2.0.0, before 2.0.2 (fixed in 2.0.2)

Published 2021-04-26. Last modified 2026-06-17.