WebReflection flatted

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-33228< 3.4.2flatted: Prototype Pollution via parse()HIGH 8.90.8 %
CVE-2026-32141< 3.4.0flatted: Unbounded recursion DoS in parse() revive phaseHIGH 7.50.8 %