Skip to content
Threat Feed
Subscribe

Product

Toml (<= 5.0.0)

1 brief RSS
high advisory

toml: Prototype pollution via ambiguous TOML key paths (CVE-2026-114142)

The toml package is vulnerable to prototype pollution, allowing unauthorized injection of properties into Object.prototype via maliciously crafted TOML documents.

toml prototype-pollution nodejs
1c