What’s Vulnerable › Products

sunnyadn js-toml vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your sunnyadn js-toml version is affected

Latest sunnyadn js-toml vulnerabilities

• CVE-2026-63386 — js-toml: Uncontrolled recursion in `load()` causes `RangeError` (stack exhaustion) on deeply nested input (CVSS 5.3)
• CVE-2026-50029 — js-toml has silent type confusion via falsy-primitive duplicate-key bypass (CVSS 5.3)
• CVE-2026-49293 — CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals (CVSS 7.5)
• CVE-2025-54803 — js-toml is vulnerable to Prototype Pollution (CVSS 7.5)