Skip to content
Ssunnyadn
Products
| Product | CVEs | Exploited | Latest |
|---|
| js-toml | 4 | – | Sep 22, 2026 |
Exploited and recent CVEs
-
CVE-2026-63386
Medium 5.3
js-toml: Uncontrolled recursion in `load()` causes `RangeError` (stack exhaustion) on deeply nested input
0.4%
-
CVE-2026-50029
Medium 5.3
js-toml has silent type confusion via falsy-primitive duplicate-key bypass
0.4%
-
CVE-2026-49293
High 7.5
CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals
0.6%
-
CVE-2025-54803
High 7.9
js-toml is vulnerable to Prototype Pollution
0.6%