Mmastodon TechnologyCybersecurity first seen 3 d ago, last 3 d ago, peak #6

toml-node vulnerability allows CPU denial-of-service attacks

Original: 🚨 EUVD-2026-107556 📊 Score: 7.5/10 (CVSS v3.1) 📦 Product: toml-node 🏢 Vendor: BinaryMuse 📅 Updated: 2026-10-22 📝 toml-no

A medium-to-high severity vulnerability, tracked as EUVD-2026-107556 with a CVSS score of 7.5, has been recorded for the toml-node library maintained by BinaryMuse. The flaw lets attackers trigger uncontrolled CPU consumption through unbounded-length integer literals passed to toml.parse(), potentially causing denial-of-service conditions in applications using the parser. The advisory was updated on 22 October 2026.

Why now: Developers and security teams are checking whether applications parsing untrusted TOML input with toml-node are exposed to the denial-of-service flaw.

toml-nodeBinaryMuseENISAEUVD-2026-107556

Open on mastodon →

Evidence

• 🚨 EUVD-2026-107556 📊 Score: 7.5/10 (CVSS v3.1) 📦 Product: toml-node 🏢 Vendor: BinaryMuse 📅 Updated: 2026-10-22 📝 toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse() 🔗 https:// euvd.enisa.europa.eu/vulnerabi… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/3261179