IA Squad
SearchPT

js-toml

js · js-tomlHeads-up

js-toml duplicate-key detection bypasses falsy values

js-toml's duplicate-key detection uses truthy checks (`if (object[key])`) instead of the `in` operator, allowing falsy primitives

27 Jun 2026 · schedule it
js · js-tomlCritical

js-toml 1.1.0 and below: Quadratic-time DoS via parseBigInt

js-toml versions up to and including 1.

27 Jun 2026 · act now