Lucene search
+L

15 matches found

osv_ghsa
osv_ghsa
•added 2026/10/05 11:41 p.m.•22 views

GHSA-R4XH-JQRQ-34V2 smol-toml: Quadratic-time parse() from parseKey rescanning to end of document on each key line

Summary parse has a quadratic-time path in parseKey, reachable on default options with ordinary valid input. For every key line and table-header line, parseKey dist/struct.js, lines 58 and 86 finds the dotted-key separator with ctx.s.indexOf'.', ctx.p, where ctx.s is the whole document. When a ke...

5.3CVSS6AI score
SaveExploits0References4
Rows per page
Query Builder