Skip to content
OpenAdvisories

Package · npm

smol-toml

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    GHSA-r4xh-jqrq-34v2

    smol-toml: Quadratic-time parse() from parseKey rescanning to end of document on each key line

    ### Summary `parse()` has a quadratic-time path in `parseKey`, reachable on default options with ordinary valid input. For every key line and table-header line, `parseKey` (dist/struct.js, lines 58 and 86) finds the dotted-key separator with `ctx.s.indexOf('.…

    smol-toml npm
  • Medium 5.3
    GHSA-v3rj-xjv7-4jmq

    smol-toml: Denial of Service via TOML documents containing thousands of consecutive commented lines

    ### Summary An attacker can send a maliciously crafted TOML to cause the parser to crash, because of a stack overflow caused by thousands of consecutive commented lines. The library uses recursion internally while parsing to skip over commented lines, which c…

    smol-toml npm
  • Medium 5.3
    GHSA-pqhp-25j4-6hq9

    smol-toml has a Denial of Service via malicious TOML document using deeply nested inline tables

    ### Summary An attacker can send a maliciously crafted TOML to cause the parser to crash because of a stack overflow caused by a deeply nested inline structure. A similar problem occurs when attempting to stringify deeply nested objects. The library does not …

    smol-toml npm