BinaryMuse

6 results · Feed

• High 7.5
  CVE-2026-114144

  toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse()

  toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() passes unbounded hexadecimal, octal, binary, and decimal digit sequences from lib/parser.js to BigInt() before reduceInteger() in lib/compiler.js checks whether the resulting…

  BinaryMuse toml-node toml npm
  Oct 21, 2026
• High 8.7
  CVE-2026-114143

  toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse()

  toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() repeatedly slices and rejoins every path prefix in lib/compiler.js while processing long dotted keys, table headers, array-of-tables headers, and inline-table keys in assign(…

  BinaryMuse toml-node toml npm
  Oct 21, 2026
• High 8.8
  CVE-2026-114142

  toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype

  toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() can write attacker-controlled properties to Object.prototype because quoteDottedString() in lib/compiler.js produces the same bookkeeping string for distinct quoted key paths…

  BinaryMuse toml-node toml npm
  Oct 21, 2026
• High 8.7
  CVE-2026-114141

  toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()

  toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, the toml.parse() compiler's addTableArray() function in lib/compiler.js rescans the complete assignedPaths and valueAssignments bookkeeping sets for every array-of-tables header. Distinct…

  BinaryMuse toml-node toml npm
  Oct 21, 2026
• High 7.5
  CVE-2026-77465

  toml-node: Uncontrolled Recursion

  toml-node is a TOML parser for Node.js and the browser. Prior to 4.2.0, toml.parse() uses a Peggy 5.1.0 generated recursive-descent parser in lib/parser.js whose peg$parsevalue, peg$parsearray, and peg$parseinline_table_entry functions recurse through nested …

  BinaryMuse toml-node toml npm
  Sep 3, 2026
• High 8.2
  CVE-2026-63376

  toml-node: Prototype Pollution Leads to `Object.prototype` Corruption via `__proto__` Key-Path Desynchronization

  toml-node is a TOML parser for Node.js and the browser. Prior to 4.1.2, toml.parse() in lib/compiler.js can be tricked by a table path such as a.b.y.__proto__.__proto__, allowing traversal from a scalar value into Number.prototype and Object.prototype. The cu…

  BinaryMuse toml-node toml npm
  Sep 3, 2026