toon vulnerabilities

1 known vulnerability in toon from Toon-format. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  toon: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2026-82404Sep 2, 2026Toon-format

  TOON is a compact, human-readable serialization of JSON data for LLM prompts. Prior to 2.3.1, decoding attacker-controlled TOON with a __proto__, constructor, or prototype key wrote through the object prototype chain instead of creating an own property, pollut