TI-2026-45186 CVE-2026-63386
js-toml: Uncontrolled recursion in `load()` causes `RangeError` (stack exhaustion) on deeply nested input
Priority MEDIUM 63
js-toml is a TOML parser for JavaScript.
Vulnerabilities
4 records
TI-2026-36854 CVE-2026-50029 · GHSA-m34p-749j-x6m6
js-toml has silent type confusion via falsy-primitive duplicate-key bypass
Priority MEDIUM 63
js-toml is a TOML parser for JavaScript, Prior to version 1.1.2, the interpreter checks whether a key already exists in a parser-built container with `if (object[key])` instead of `if (key in object)`.
TI-2026-36479 CVE-2026-49293 · GHSA-wp3c-266w-4qfq
CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals
Priority HIGH 72
js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec.
TI-2025-34557 CVE-2025-54803 · GHSA-65fc-cr5f-v7r2
js-toml is vulnerable to Prototype Pollution
Priority HIGH 74
js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec.