Lucene search
+L

16 matches found

Github Security Blog
Github Security Blog
•added 2026/10/22 4:38 p.m.•9 views

toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse()

Summary toml.parse is vulnerable to a quadratic-complexity On² denial-of-service via a single long dotted key, table header, or inline-table key. A 100KB crafted document causes a multi-second synchronous hang; a 200KB document crashes the Node.js process outright with an uncatchable out-of-memor...

8.7CVSS6.3AI score0.00473EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder