Lucene search
K

5 matches found

Snyk
Snyk
added 2026/03/25 9:3 p.m.3 views

Uncontrolled Recursion

Overview smol-toml is an A small, fast, and correct TOML parser/serializer Affected versions of this package are vulnerable to Uncontrolled Recursion. An attacker can cause the application to crash by submitting TOML documents containing thousands of consecutive commented lines, which triggers...

6.9CVSS6AI score
Exploits0References2
Veracode
Veracode
added 2025/10/13 3:55 a.m.5 views

Prototype Pollution

js-toml is vulnerable to Prototype Pollution. The vulnerability is due to improper handling of user-supplied TOML input during parsing, which allows an attacker to craft malicious TOML data that modifies properties of the global Object.prototype, potentially leading to arbitrary code execution or...

7.9CVSS8AI score0.00297EPSS
Exploits1References4Affected Software1
Snyk
Snyk
added 2025/08/05 1:42 a.m.1 views

Prototype Pollution

Overview js-toml is an A TOML parser for JavaScript/TypeScript, targeting TOML 1.0.0 Spec Affected versions of this package are vulnerable to Prototype Pollution via the parsing process. An attacker can inject or modify properties on the global Object.prototype by supplying specially crafted TOML...

10CVSS8.2AI score0.00297EPSS
Exploits1References2
OSV
OSV
added 2024/01/26 2:15 a.m.0 views

UBUNTU-CVE-2023-6159

An issue has been discovered in GitLab CE/EE affecting all versions from 12.7 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 It was possible for an attacker to trigger a Regular Expression Denial of Service via a Cargo.toml containing maliciously crafted input...

6.5CVSS5.7AI score0.0057EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2024/01/25 12:0 a.m.3 views

PT-2024-1477 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.7 through 16.6.5 GitLab CE/EE versions 16.7 through 16.7.3 GitLab CE/EE versions 16.8 through 16.8.0 Description: An issue has been discovered in GitLab CE/EE, where it is possible for an attacker to trigger a Regular...

6.8CVSS6.8AI score0.0057EPSS
Exploits0References14
Rows per page
Query Builder