TO
Product
toml-node
6
CVEs
0
On KEV
8.8
Max CVSS
4
New 30D
Severity mix
Critical 0High 6Medium 0Low 0
Watch
Add toml-node to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-114142 New | 8.8 | Oct 21 | toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype Affected: < 5.0.1 |
| CVE-2026-114143 New | 8.7 | Oct 21 | toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse() Affected: < 5.0.1 |
| CVE-2026-114141 New | 8.7 | Oct 21 | toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse() Affected: < 5.0.1 |
| CVE-2026-63376 | 8.2 | Sep 3 | toml-node: Prototype Pollution Leads to `Object.prototype` Corruption via `__proto__` Key-Path Desynchronization Affected: < 4.1.2 |
| CVE-2026-114144 New | 7.5 | Oct 21 | toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse() Affected: < 5.0.1 |
| CVE-2026-77465 | 7.5 | Sep 3 | toml-node: Uncontrolled Recursion Affected: < 4.2.0 |
Showing 6
