CyberSecBulletin

TooTallNate vulnerabilities

We track 2 vulnerabilities in TooTallNate products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest TooTallNate vulnerabilities

  • 7.5 High severity

    plist.js: Uncontrolled Recursion

    CVE-2026-124078TooTallNate

    plist.js (npm package 'plist') before 5.0.1 contains an uncontrolled resource consumption vulnerability in the binary property-list parser (parseBinary) that allows unauthenticated attackers to crash a Node.js process by exploiting unmemoized recursive resolut

  • 7.5 High severity

    speaker: Uncontrolled Resource Consumption

    CVE-2024-21526Speaker

    All versions of the package speaker are vulnerable to Denial of Service (DoS) when providing unexpected input types to the channels property of the Speaker object makes it possible to reach an assert macro. Exploiting this vulnerability can lead to a process c