js-toml
js · js-tomlHeads-up
js-toml duplicate-key detection bypasses falsy values
js-toml's duplicate-key detection uses truthy checks (`if (object[key])`) instead of the `in` operator, allowing falsy primitives
27 Jun 2026 · schedule it
js · js-tomlCritical
js-toml 1.1.0 and below: Quadratic-time DoS via parseBigInt
js-toml versions up to and including 1.
27 Jun 2026 · act now