TI-2026-78988 CVE-2026-114144 · GHSA-9qmh-m7c6-f92p
CPU denial of service in toml-node via long integer literals
Priority HIGH 72
toml-node is a TOML parser for Node.js and the browser.
Vulnerabilities
6 records
TI-2026-78987 CVE-2026-114143 · GHSA-9j65-hcg3-gc64
Quadratic complexity denial of service in toml-node TOML parser
Priority HIGH 77
toml-node is a TOML parser for Node.js and the browser.
TI-2026-78986 CVE-2026-114142 · GHSA-h895-cgqg-jf52
Prototype pollution in toml-node parser writes to Object.prototype
Priority MEDIUM 47
toml-node is a TOML parser for Node.js and the browser.
TI-2026-78985 CVE-2026-114141 · GHSA-4qx8-w7c3-pj3p
Quadratic complexity in toml-node allows denial of service
Priority MEDIUM 44
toml-node is a TOML parser for Node.js and the browser.
TI-2026-54014 CVE-2026-77465 · GHSA-82x6-q7mm-w9cf
toml-node: Uncontrolled Recursion
Priority MEDIUM 40
toml-node is a TOML parser for Node.js and the browser.
TI-2026-45178 CVE-2026-63376 · GHSA-v5mp-jgw5-2x6j
toml-node: Prototype Pollution Leads to `Object.prototype` Corruption via `__proto__` Key-Path Desynchronization
Priority HIGH 75
toml-node is a TOML parser for Node.js and the browser.