573 matches found
advisory-db
This is a security advisory database repository for Rust crates published via crates.io. The repository contains a collection of security advisories filed against various Rust crates, with each advisory containing information in TOML format. The advisories are categorized by crate name, and each...
advisory-db
This is a security advisory database for Rust crates published through crates.io. The database is maintained by the RustSec project and contains information on security vulnerabilities in various Rust crates. The database is stored in TOML format and can be consumed by various tools for auditing...
Malicious code in betelgeuse-react-bootstrap-toml-wolf (npm)
The package betelgeuse-react-bootstrap-toml-wolf was found to contain malicious code...
Malicious code in node-config-toml-deimos-pegasus (npm)
The package node-config-toml-deimos-pegasus was found to contain malicious code...
Malicious code in optimize-css-assets-webpack-plugin-izar-nuxtjs-toml (npm)
The package optimize-css-assets-webpack-plugin-izar-nuxtjs-toml was found to contain malicious code...
MAL-2025-45086 Malicious code in magellan-geckodriver-toml-leda (npm)
The package magellan-geckodriver-toml-leda was found to contain malicious code...
MAL-2025-45331 Malicious code in node-config-toml-deimos-pegasus (npm)
The package node-config-toml-deimos-pegasus was found to contain malicious code...
Malicious code in toml-dotenv-safe-dysonswarm-quantumfoam (npm)
The package toml-dotenv-safe-dysonswarm-quantumfoam was found to contain malicious code...
Malicious code in toml-superposition-barnard-sqlite (npm)
The package toml-superposition-barnard-sqlite was found to contain malicious code...
MAL-2025-46363 Malicious code in toml-superposition-barnard-sqlite (npm)
The package toml-superposition-barnard-sqlite was found to contain malicious code...
MAL-2025-43615 Malicious code in betelgeuse-react-bootstrap-toml-wolf (npm)
The package betelgeuse-react-bootstrap-toml-wolf was found to contain malicious code...
Malicious code in magellan-geckodriver-toml-leda (npm)
The package magellan-geckodriver-toml-leda was found to contain malicious code...
MAL-2025-45473 Malicious code in optimize-css-assets-webpack-plugin-izar-nuxtjs-toml (npm)
The package optimize-css-assets-webpack-plugin-izar-nuxtjs-toml was found to contain malicious code...
MAL-2025-46362 Malicious code in toml-dotenv-safe-dysonswarm-quantumfoam (npm)
The package toml-dotenv-safe-dysonswarm-quantumfoam was found to contain malicious code...
Prototype Pollution
js-toml is vulnerable to Prototype Pollution. The vulnerability is due to improper input validation when parsing maliciously crafted TOML input, allowing modification of properties on Object.prototype...
CVE-2025-55195
@std/toml is the Deno Standard Library. Prior to version 1.0.9, an attacker can pollute the prototype chain in Node.js runtime and Browser when parsing untrusted TOML data, thus achieving Prototype Pollution PP vulnerability. This is because the library is merging an untrusted object with an empt...
Malicious code in blazar-comet-toml-resolvers (npm)
The package blazar-comet-toml-resolvers was found to contain malicious code...
Malicious code in callback-apex-ursa-toml (npm)
The package callback-apex-ursa-toml was found to contain malicious code...