binarymuse/toml-node Security Advisories | GitStock

high2026-10-22

toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype

GHSA-h895-cgqg-jf52 · CVE-2026-114142

high2026-10-22

toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()

GHSA-4qx8-w7c3-pj3p · CVE-2026-114141

high2026-10-22

toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse()

GHSA-9j65-hcg3-gc64 · CVE-2026-114143

high2026-10-22

toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse()

GHSA-9qmh-m7c6-f92p · CVE-2026-114144

high2026-09-03

toml-node: Uncontrolled Recursion

GHSA-82x6-q7mm-w9cf · CVE-2026-77465

high2026-09-03

toml-node: Prototype Pollution Leads to `Object.prototype` Corruption via `__proto__` Key-Path Desynchronization

GHSA-v5mp-jgw5-2x6j · CVE-2026-63376