sunnyadn js-toml

• CVE-2026-63386 Medium 5.3 js-toml: Uncontrolled recursion in `load()` causes `RangeError` (stack exhaustion) on deeply nested input 0.4%
• CVE-2026-50029 Medium 5.3 js-toml has silent type confusion via falsy-primitive duplicate-key bypass 0.4%
• CVE-2026-49293 High 7.5 CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals 0.6%
• CVE-2025-54803 High 7.9 js-toml is vulnerable to Prototype Pollution 0.6%