WebReflection flatted

• CVE-2026-33228 Critical 9.8 flatted: Prototype Pollution via parse() 0.9%
• CVE-2026-32141 High 7.5 flatted: Unbounded recursion DoS in parse() revive phase 0.8%