Regular Expression Denial of Service (ReDoS)

Overview js-toml is an A TOML parser for JavaScript/TypeScript, targeting TOML 1.0.0 Spec Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the parseBigInt function used by the load process. An attacker can cause excessive CPU consumption and block...

CVE-2026-49293

js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. Versions up to and including 1.1.0 parse hexadecimal / octal / binary integer literals via a hand-written "parseBigInt" loop that multiplies a "BigInt" accumulator by the radix once per input digit. Each iteration...

CVE-2026-49293: Uncontrolled Resource Consumption

js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. Versions up to and including 1.1.0 parse hexadecimal / octal / binary integer literals via a hand-written parseBigInt loop that multiplies a BigInt accumulator by the radix once per input digit. Each iteration...