CVE-2026-114142 toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype

toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse can write attacker-controlled properties to Object.prototype because quoteDottedString in lib/compiler.js produces the same bookkeeping string for distinct quoted key paths, allowing addTableArray to clear another...

CVE-2026-114142

The toml-node TOML parser for Node.js and the browser is vulnerable to a Prototype Pollution vulnerability in versions prior to 5.0.1 . The root cause lies in lib/compiler.js, where quoteDottedString() produces identical bookkeeping strings for distinct quoted key paths. This allows addTableArray...

EUVD-2026-107553

toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse can write attacker-controlled properties to Object.prototype because quoteDottedString in lib/compiler.js produces the same bookkeeping string for distinct quoted key paths, allowing addTableArray to clear another...