js-toml vulnerabilities

2 known vulnerabilities in js-toml from Sunnyadn. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  js-toml: Uncontrolled Resource Consumption

  CVE-2026-49293Jun 19, 2026Sunnyadn

  js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. Versions up to and including 1.1.1 parse hexadecimal / octal / binary integer literals via a hand-written `parseBigInt` loop that multiplies a `BigInt` accumulator by the radix

• 7.5 High severity

  js-toml: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2025-54803Aug 5, 2025Sunnyadn

  js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. In versions below 1.0.2, a prototype pollution vulnerability in js-toml allows a remote attacker to add or modify properties of the global Object.prototype by parsing a maliciou