Security: sunnyadn/js-toml
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Exponential backtracking in the multi-line basic string grammar lets a ~100-byte document hang the event loopGHSA-j4cp-cc36-jxwg published
Aug 4, 2026 by sunnyadnHigh -
Uncontrolled recursion in `load()` causes `RangeError` (stack exhaustion) on deeply nested inputGHSA-3g82-77xr-68x5 published
Jun 30, 2026 by sunnyadnModerate -
js-toml silent type confusion via falsy-primitive duplicate-key bypassGHSA-m34p-749j-x6m6 published
May 28, 2026 by sunnyadnModerate -
CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literalsGHSA-wp3c-266w-4qfq published
May 25, 2026 by sunnyadnHigh -
Prototype Pollution in js-tomlGHSA-65fc-cr5f-v7r2 published
Aug 3, 2025 by sunnyadnHigh
Learn more about advisories related to sunnyadn/js-toml in the GitHub Advisory Database