TI-2025-34557 CVE-2025-54803 · GHSA-65fc-cr5f-v7r2
js-toml is vulnerable to Prototype Pollution
Priority HIGH 74
js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec.
sunnyadn
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
sunnyadn records in CISA KEVNo sunnyadn vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Js-toml · all components
TI-2026-36479 CVE-2026-49293 · GHSA-wp3c-266w-4qfq
CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals
Priority HIGH 72
js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec.