js-toml vulnerabilities (npm)

3 vulnerabilities.

• js-toml npm js-toml has silent type confusion via falsy-primitive duplicate-key bypass CVE-2026-50029 Fix available 5.3 MediumJune 26, 2026
• js-toml npm CPU exhaustion via O(n^2) BigInt construction on radix-prefixed integer literals CVE-2026-49293 Fix available 7.5 HighJune 19, 2026
• js-toml npm js-toml is vulnerable to Prototype Pollution CVE-2025-54803 Fix available 7.9 HighAugust 4, 2025