All 6 CVE vulnerabilities found in toml-node, with AI-generated Chinese analysis, references, and POCs.
Vendor: BinaryMuse
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-114144 | toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse() CWE-400 | 7.5 | High | 2026-10-21 |
| CVE-2026-114143 | toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse() CWE-407 | 8.7 | High | 2026-10-21 |
| CVE-2026-114142 | toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype CWE-1321 | 8.8 | High | 2026-10-21 |
| CVE-2026-114141 | toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse() CWE-407 | 8.7 | High | 2026-10-21 |
| CVE-2026-77465 | toml-node: Uncontrolled Recursion CWE-674 | 7.5 | High | 2026-09-03 |
| CVE-2026-63376 | toml-node: Prototype Pollution Leads to `Object.prototype` Corruption via `__proto__` Key-Path Desynchronization CWE-1321 | 8.2 | High | 2026-09-03 |
All 6 known CVE vulnerabilities affecting toml-node with full Chinese analysis, references, and POCs where available.