smol-toml vulnerabilities
CVEs whose affected-version data names the smol-toml package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
GHSA-r4xh-jqrq-34v2Medium· 5.3smol-toml: Quadratic-time parse() from parseKey rescanning to end of document on each key line
smol-toml: Quadratic-time parse() from parseKey rescanning to end of document on each key line
▾ Sunlitsmol-toml · smol-tomlvia GHSA
CVE-2026-85730High· 8.2PoCsmol-toml is a small, fast, and correct TOML parser and serializer
smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse() can enter an infinite loop when a value inside an array or inline table is followed by a comment with no trailing newline. In src/util.ts, skipUn…
▾ Midnightsquirrelchat · smol-tomlEPSS 0.52%via NVD