Skip to content
OpenAdvisories

Package · npm

js-toml

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-50029

    js-toml has silent type confusion via falsy-primitive duplicate-key bypass

    js-toml is a TOML parser for JavaScript, Prior to version 1.1.2, the interpreter checks whether a key already exists in a parser-built container with `if (object[key])` instead of `if (key in object)`. When the prior value is a falsy primitive — `false`, `0`,…

    sunnyadn js-toml js-toml npm