EUVD-2026-107552

toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse...

GHSA-4QX8-W7C3-PJ3P toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()

Summary toml.parse is vulnerable to a quadratic-complexity On² denial-of-service via many array-of-tables name headers. addTableArray in lib/compiler.js rescans two entire bookkeeping Sets on every name header without pruning unrelated or distinct entries, so a document containing n such headers...

toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()

Summary toml.parse is vulnerable to a quadratic-complexity On² denial-of-service via many array-of-tables name headers. addTableArray in lib/compiler.js rescans two entire bookkeeping Sets on every name header without pruning unrelated or distinct entries, so a document containing n such headers...

Linux Distros Unpatched Vulnerability : CVE-2026-114141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, the toml.parse compiler's addTableArray function in lib/compiler.js rescans the complete...

CVE-2026-114141

toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, the toml.parse compiler's addTableArray function in lib/compiler.js rescans the complete assignedPaths and valueAssignments bookkeeping sets for every array-of-tables header. Distinct name paths are not pruned, so a document...

CVE-2026-114141 toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()

toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, the toml.parse compiler's addTableArray function in lib/compiler.js rescans the complete assignedPaths and valueAssignments bookkeeping sets for every array-of-tables header. Distinct name paths are not pruned, so a document...

CVE-2026-114141

toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, the toml.parse compiler's addTableArray function in lib/compiler.js rescans the complete assignedPaths and valueAssignments bookkeeping sets for every array-of-tables header. Distinct name paths are not pruned, so a document...

CVE-2026-114141 toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()

toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, the toml.parse compiler's addTableArray function in lib/compiler.js rescans the complete assignedPaths and valueAssignments bookkeeping sets for every array-of-tables header. Distinct name paths are not pruned, so a document...

CVE-2026-114141

The toml-node TOML parser for Node.js and the browser is vulnerable to a Denial of Service (DoS) attack due to inefficient algorithmic complexity. In versions prior to 5.0.1 , the addTableArray() function in lib/compiler.js fails to prune distinct [[name]] paths, causing it to rescan complete boo...

CVE-2026-114141 toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()

toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, the toml.parse compiler's addTableArray function in lib/compiler.js rescans the complete assignedPaths and valueAssignments bookkeeping sets for every array-of-tables header. Distinct name paths are not pruned, so a document...

Michelle Tilley TOML Parser for Node.js resource management error vulnerability

Michelle Tilley: Versions of the TOML Parser for Node.js prior to 5.0.1 contain a resource management error vulnerability. This vulnerability arises because the addTableArray function in lib/compiler.js re-scans the entire set of assignedPaths and valueAssignments records for each array table...

PT-2026-120810

Name of the Vulnerable Software and Affected Versions toml-node versions prior to 5.0.1 Description The addTableArray function within the toml.parse compiler in lib/compiler.js fails to prune distinct name paths. Consequently, it rescans the entire assignedPaths and valueAssignments bookkeeping...