sunnyadn

4 results · Feed

• Medium 5.3
  CVE-2026-63386

  js-toml: Uncontrolled recursion in `load()` causes `RangeError` (stack exhaustion) on deeply nested input

  js-toml is a TOML parser for JavaScript. Prior to 1.1.3, load() does not bound nesting or dotted-key depth in the recursive parser at src/load/parser.ts or the interpreter at src/load/interpreter.ts, so deeply nested arrays, deeply nested inline tables, or lo…

  sunnyadn js-toml
  Sep 22, 2026
• Medium 5.3
  CVE-2026-50029

  js-toml has silent type confusion via falsy-primitive duplicate-key bypass

  js-toml is a TOML parser for JavaScript, Prior to version 1.1.2, the interpreter checks whether a key already exists in a parser-built container with `if (object[key])` instead of `if (key in object)`. When the prior value is a falsy primitive — `false`, `0`,…

  sunnyadn js-toml js-toml npm
  Aug 14, 2026
• High 7.5
  CVE-2026-49293

  CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals

  js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. Versions up to and including 1.1.1 parse hexadecimal / octal / binary integer literals via a hand-written `parseBigInt` loop that multiplies a `BigInt` accumulator by the radix…

  sunnyadn js-toml js-toml npm
  Jun 19, 2026
• High 7.9
  CVE-2025-54803

  js-toml is vulnerable to Prototype Pollution

  js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. In versions below 1.0.2, a prototype pollution vulnerability in js-toml allows a remote attacker to add or modify properties of the global Object.prototype by parsing a malicio…

  sunnyadn js-toml js-toml npm
  Aug 5, 2025