sunnyadn/js-toml Security Advisories | GitStock

medium2026-06-26

js-toml has silent type confusion via falsy-primitive duplicate-key bypass

GHSA-m34p-749j-x6m6 · CVE-2026-50029

high2026-06-26

js-toml vulnerable to CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals

GHSA-wp3c-266w-4qfq · CVE-2026-49293

high2025-08-04

js-toml Prototype Pollution Vulnerability

GHSA-65fc-cr5f-v7r2 · CVE-2025-54803