CVE-2021-48012

fast-toml through 0.5.4 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by supplying TOML containing proto, constructor or prototype key segments. Attackers can pass proto or constructor.prototype table headers or proto.x dotted keys to parse to pollu...

EUVD-2021-34885

fast-toml through 0.5.4 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by supplying TOML containing proto, constructor or prototype key segments. Attackers can pass proto or constructor.prototype table headers or proto.x dotted keys to parse to pollu...

CVE-2021-48012 fast-toml through 0.5.4 Prototype Pollution via __proto__ Keys in Parsed TOML

fast-toml through 0.5.4 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by supplying TOML containing proto, constructor or prototype key segments. Attackers can pass proto or constructor.prototype table headers or proto.x dotted keys to parse to pollu...

CVE-2021-48012

The fast-toml library, in versions through 0.5.4 , is vulnerable to a prototype pollution vulnerability. An attacker can modify Object.prototype by providing TOML input containing __proto__, constructor, or prototype key segments. Specifically, passing [__proto__] or [constructor.prototype] table...