EUVD-2026-107553

toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype...

CVE-2026-114142 toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype

toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse can write attacker-controlled properties to Object.prototype because quoteDottedString in lib/compiler.js produces the same bookkeeping string for distinct quoted key paths, allowing addTableArray to clear another...

CVE-2026-114142 toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype

toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse can write attacker-controlled properties to Object.prototype because quoteDottedString in lib/compiler.js produces the same bookkeeping string for distinct quoted key paths, allowing addTableArray to clear another...

CVE-2026-114142

toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse can write attacker-controlled properties to Object.prototype because quoteDottedString in lib/compiler.js produces the same bookkeeping string for distinct quoted key paths, allowing addTableArray to clear another...

CVE-2026-114142

The toml-node TOML parser for Node.js and the browser is vulnerable to a Prototype Pollution vulnerability in versions prior to 5.0.1 . The root cause lies in lib/compiler.js, where quoteDottedString() produces identical bookkeeping strings for distinct quoted key paths. This allows addTableArray...

PT-2026-120811

Name of the Vulnerable Software and Affected Versions toml-node versions prior to 5.0.1 Description The toml.parse function allows writing attacker-controlled properties to Object.prototype. This occurs because the quoteDottedString function in lib/compiler.js generates identical bookkeeping...

Michelle Tilley TOML Parser for Node.js input validation error vulnerability

Versions prior to 5.0.1 of the Michelle Tilley TOML Parser for Node.js contain an input validation error vulnerability. This vulnerability arises because quoteDottedString in lib/compiler.js generates identical bookkeeping strings for different quote key paths, allowing addTableArray to bypass...