Toon-format vulnerabilities
We track 1 vulnerability in Toon-format products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 2, 2026.
1vulnerabilities
0critical
1high
0exploited
8.3average CVSS score
Latest Toon-format vulnerabilities
- 8.3 High severity
toon: Improperly Controlled Modification of Object Prototype Attributes
TOON is a compact, human-readable serialization of JSON data for LLM prompts. Prior to 2.3.1, decoding attacker-controlled TOON with a __proto__, constructor, or prototype key wrote through the object prototype chain instead of creating an own property, pollut