Lucene search
+L

12 matches found

osv_ghsa
osv_ghsa
•added 2026/10/22 4:38 p.m.•17 views

GHSA-4QX8-W7C3-PJ3P toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()

Summary toml.parse is vulnerable to a quadratic-complexity On² denial-of-service via many array-of-tables name headers. addTableArray in lib/compiler.js rescans two entire bookkeeping Sets on every name header without pruning unrelated or distinct entries, so a document containing n such headers...

8.7CVSS6.1AI score0.00395EPSS
SaveExploits0References5
Rows per page
Query Builder