barrelly (>=1.0.0 <=1.2.0) potentially affected by CVE-2025-54803 via js-toml (=1.0.0)
js-toml NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on js-toml and may be impacted: - barrelly =1.0.0, =1.2.0 Source cves: CVE-2025-54803 Source advisory: SNYK:JS-JSTOML-11483956...