Skip to content
OpenAdvisories

Vendor

sunnyadn

4 known vulnerabilities.

Products

js-toml 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-49293

    CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals

    js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. Versions up to and including 1.1.1 parse hexadecimal / octal / binary integer literals via a hand-written `parseBigInt` loop that multiplies a `BigInt` accumulator by the radix…

    sunnyadn js-toml js-toml npm
  • High 7.9
    CVE-2025-54803

    js-toml is vulnerable to Prototype Pollution

    js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. In versions below 1.0.2, a prototype pollution vulnerability in js-toml allows a remote attacker to add or modify properties of the global Object.prototype by parsing a malicio…

    sunnyadn js-toml js-toml npm