CVE-2026-50029
- EPSS 0.23%
- Veröffentlicht 14.08.2026 19:17:18
- Zuletzt bearbeitet 17.08.2026 20:16:43
js-toml is a TOML parser for JavaScript, Prior to version 1.1.2, the interpreter checks whether a key already exists in a parser-built container with `if (object[key])` instead of `if (key in object)`. When the prior value is a falsy primitive — `fal...
CVE-2026-49293
- EPSS 0.41%
- Veröffentlicht 19.06.2026 18:14:20
- Zuletzt bearbeitet 26.06.2026 12:11:46
js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. Versions up to and including 1.1.0 parse hexadecimal / octal / binary integer literals via a hand-written `parseBigInt` loop that multiplies a `BigInt` accumulator by ...
CVE-2025-54803
- EPSS 0.5%
- Veröffentlicht 05.08.2025 00:06:15
- Zuletzt bearbeitet 09.10.2025 17:32:53
js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. In versions below 1.0.2, a prototype pollution vulnerability in js-toml allows a remote attacker to add or modify properties of the global Object.prototype by parsing ...