TO
Product
toml-node
by BinaryMuse · last CVE Oct 21, 2026
6
CVEs
0
On KEV
8.8
Max CVSS
4
New 30D
Severity mix
Critical 0High 6Medium 0Low 0
Watch

Add toml-node to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-114142
New
8.8
0%
Oct 21
toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype
Affected: < 5.0.1
CVE-2026-114143
New
8.7
0%
Oct 21
toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse()
Affected: < 5.0.1
CVE-2026-114141
New
8.7
0%
Oct 21
toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()
Affected: < 5.0.1
CVE-2026-63376
8.2
1%
Sep 3
toml-node: Prototype Pollution Leads to `Object.prototype` Corruption via `__proto__` Key-Path Desynchronization
Affected: < 4.1.2
CVE-2026-114144
New
7.5
0%
Oct 21
toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse()
Affected: < 5.0.1
CVE-2026-77465
7.5
1%
Sep 3
toml-node: Uncontrolled Recursion
Affected: < 4.2.0
Showing 6