All products

js-toml

npm · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
js-toml vulnerable to CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literalsCVE-2026-49293 · GHSA-WP3C-266W-4QFQ js-toml npm High Fix reported
js-toml has silent type confusion via falsy-primitive duplicate-key bypassCVE-2026-50029 · GHSA-M34P-749J-X6M6 js-toml npm Medium Fix reported
js-toml Prototype Pollution VulnerabilityCVE-2025-54803 · GHSA-65FC-CR5F-V7R2 js-toml npm High Fix reported