BinaryMuse

A medium-to-high severity vulnerability, tracked as EUVD-2026-107556 with a CVSS score of 7.5, has been recorded for the toml-node library maintained by BinaryMuse. The flaw lets attackers trigger uncontrolled CPU consumption through unbounded-length integer literals passed to toml.parse(), potentially causing denial-of-service conditions in applications using the parser. The advisory was updated on 22 October 2026.

A new vulnerability, EUVD-2026-107555, has been catalogued in the toml-node TOML parser maintained by BinaryMuse. The flaw, rated 8.7 out of 10 on the CVSS v3.1 scale, allows a quadratic-complexity denial-of-service attack: maliciously crafted input with long dotted keys or table paths can cause toml.parse() to become extremely slow, hanging applications that parse untrusted TOML files. Developers using the library are advised to review the advisory and update.

A high-severity vulnerability, EUVD-2026-107552, has been published for toml-node, the TOML parser maintained by BinaryMuse. The flaw carries a CVSS v3.1 score of 8.7 and allows quadratic-complexity denial of service via many array-of-tables headers passed to toml.parse(). Security trackers updated the entry on 22 October 2026, and developers relying on the parser are expected to check whether their versions need patching.