MAL-2025-37032 Malicious code in toml-private-cosmos-entanglement (npm)

The package toml-private-cosmos-entanglement was found to contain malicious code...

Malicious code in janus-meteor-toml-oauth (npm)

The package janus-meteor-toml-oauth was found to contain malicious code...

MAL-2025-34144 Malicious code in sublimation-toml-cluster-gridsome (npm)

The package sublimation-toml-cluster-gridsome was found to contain malicious code...

MAL-2025-24138 Malicious code in jwt-toml-leda-despina (npm)

The package jwt-toml-leda-despina was found to contain malicious code...

MAL-2025-33954 Malicious code in start-scorpius-toml-build (npm)

The package start-scorpius-toml-build was found to contain malicious code...

MAL-2025-28709 Malicious code in panspermia-toml-await-protractor (npm)

The package panspermia-toml-await-protractor was found to contain malicious code...

MAL-2025-23619 Malicious code in jasmine-antimatter-toml-photon (npm)

The package jasmine-antimatter-toml-photon was found to contain malicious code...

MAL-2025-37031 Malicious code in toml-karma-nodejs-rocket (npm)

The package toml-karma-nodejs-rocket was found to contain malicious code...

CVE-2025-55195

@std/toml is the Deno Standard Library. Prior to version 1.0.9, an attacker can pollute the prototype chain in Node.js runtime and Browser when parsing untrusted TOML data, thus achieving Prototype Pollution PP vulnerability. This is because the library is merging an untrusted object with an empt...

CVE-2025-55195 @std/toml Prototype Pollution in Node.js and Browser

@std/toml is the Deno Standard Library. Prior to version 1.0.9, an attacker can pollute the prototype chain in Node.js runtime and Browser when parsing untrusted TOML data, thus achieving Prototype Pollution PP vulnerability. This is because the library is merging an untrusted object with an empt...

CVE-2025-55195 @std/toml Prototype Pollution in Node.js and Browser

@std/toml is the Deno Standard Library. Prior to version 1.0.9, an attacker can pollute the prototype chain in Node.js runtime and Browser when parsing untrusted TOML data, thus achieving Prototype Pollution PP vulnerability. This is because the library is merging an untrusted object with an empt...

CVE-2025-55195

@std/toml is the Deno Standard Library. Prior to version 1.0.9, an attacker can pollute the prototype chain in Node.js runtime and Browser when parsing untrusted TOML data, thus achieving Prototype Pollution PP vulnerability. This is because the library is merging an untrusted object with an empt...

CVE-2025-55195

The CVE-2025-55195 entry concerns @std/toml (Deno Standard Library). The vulnerability arises prior to version 1.0.9 when parsing untrusted TOML data, allowing Prototype Pollution by merging an untrusted object with an empty object whose prototype chain is inherited. This affects environments usi...

Deno Standard Library 安全漏洞

Deno Standard Library std is a Deno Standard Library open source by Deno. A security vulnerability exists in Deno Standard Library versions prior to 1.0.9, which stems from a potential prototype contamination when parsing untrusted TOML data...

PT-2025-33341 · @Std/Toml · @Std/Toml

Name of the Vulnerable Software and Affected Versions: @std/toml versions prior to 1.0.9 Description: Prior to version 1.0.9, the @std/toml library is susceptible to a Prototype Pollution PP vulnerability in Node.js runtime and Browser environments when parsing untrusted TOML data. This occurs...

CVE-2025-55195: Improperly Controlled Modification of Object Prototype Attributes

@std/toml is the Deno Standard Library. Prior to version 1.0.9, an attacker can pollute the prototype chain in Node.js runtime and Browser when parsing untrusted TOML data, thus achieving Prototype Pollution PP vulnerability. This is because the library is merging an untrusted object with an empt...

CVE-2025-54803

js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. In versions below 1.0.2, a prototype pollution vulnerability in js-toml allows a remote attacker to add or modify properties of the global Object.prototype by parsing a maliciously crafted TOML input. This is fixed...

Prototype Pollution

Overview js-toml is an A TOML parser for JavaScript/TypeScript, targeting TOML 1.0.0 Spec Affected versions of this package are vulnerable to Prototype Pollution via the parsing process. An attacker can inject or modify properties on the global Object.prototype by supplying specially crafted TOML...

barrelly (>=1.0.0, <=1.2.0) potentially affected by CVE-2025-54803 via js-toml (1.0.0)

js-toml NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on js-toml and may be impacted: - barrelly =1.0.0, =1.2.0 Source cves: CVE-2025-54803 Source advisory: SNYK:JS-JSTOML-11483956...

CVE-2025-54803

js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. In versions below 1.0.2, a prototype pollution vulnerability in js-toml allows a remote attacker to add or modify properties of the global Object.prototype by parsing a maliciously crafted TOML input. This is fixed...