TI-2025-34557 CVE-2025-54803 · GHSA-65fc-cr5f-v7r2
js-toml is vulnerable to Prototype Pollution
Priority HIGH 74
js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec.
sunnyadn
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
sunnyadn records in CISA KEVNo sunnyadn vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2026-36479 CVE-2026-49293 · GHSA-wp3c-266w-4qfq
CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals
Priority HIGH 72
js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec.
TI-2026-45186 CVE-2026-63386
js-toml: Uncontrolled recursion in `load()` causes `RangeError` (stack exhaustion) on deeply nested input
Priority MEDIUM 63
js-toml is a TOML parser for JavaScript.
TI-2026-36854 CVE-2026-50029 · GHSA-m34p-749j-x6m6
js-toml has silent type confusion via falsy-primitive duplicate-key bypass
Priority MEDIUM 63
js-toml is a TOML parser for JavaScript, Prior to version 1.1.2, the interpreter checks whether a key already exists in a parser-built container with `if (object[key])` instead of `if (key in object)`.