Toml-node (Binarymuse) - vulnerabilities (CVEs)

6 CVEs, 4 in the last 30 days, 1 known versions, newest CVE from 2026-10-21. Vendor: Binarymuse.

CVEs of Toml-node

• CVE-2026-114144 - CVSS 7.5 (high), 2026-10-21: toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() passes unbounded hexadecimal, octal, binary, and decimal digit sequences…
• CVE-2026-114143 - CVSS 8.7 (high), 2026-10-21: toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() repeatedly slices and rejoins every path prefix in lib/compiler.js while…
• CVE-2026-114142 - CVSS 8.8 (high), 2026-10-21: toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() can write attacker-controlled properties to Object.prototype because…
• CVE-2026-114141 - CVSS 8.7 (high), 2026-10-21: toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, the toml.parse() compiler's addTableArray() function in lib/compiler.js rescans the…
• CVE-2026-77465 - CVSS 7.5 (high), 2026-09-03: toml-node is a TOML parser for Node.js and the browser. Prior to 4.2.0, toml.parse() uses a Peggy 5.1.0 generated recursive-descent parser in lib/parser.js…
• CVE-2026-63376 - CVSS 8.2 (high), 2026-09-03: toml-node is a TOML parser for Node.js and the browser. Prior to 4.1.2, toml.parse() in lib/compiler.js can be tricked by a table path such as…