Skip to content
OpenAdvisories

Vendor

sunnyadn

4 known vulnerabilities.

Products

js-toml 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-63386

    js-toml: Uncontrolled recursion in `load()` causes `RangeError` (stack exhaustion) on deeply nested input

    js-toml is a TOML parser for JavaScript. Prior to 1.1.3, load() does not bound nesting or dotted-key depth in the recursive parser at src/load/parser.ts or the interpreter at src/load/interpreter.ts, so deeply nested arrays, deeply nested inline tables, or lo…

    sunnyadn js-toml
  • Medium 5.3
    CVE-2026-50029

    js-toml has silent type confusion via falsy-primitive duplicate-key bypass

    js-toml is a TOML parser for JavaScript, Prior to version 1.1.2, the interpreter checks whether a key already exists in a parser-built container with `if (object[key])` instead of `if (key in object)`. When the prior value is a falsy primitive — `false`, `0`,…

    sunnyadn js-toml js-toml npm