Mmastodon TechnologyCybersecurity first seen 3 d ago, last 3 d ago, peak #11

High-severity denial-of-service flaw disclosed in toml-node

Original: 🚨 EUVD-2026-107555 📊 Score: 8.7/10 (CVSS v3.1) 📦 Product: toml-node 🏢 Vendor: BinaryMuse 📅 Updated: 2026-10-22 📝 toml-no

A new vulnerability, EUVD-2026-107555, has been catalogued in the toml-node TOML parser maintained by BinaryMuse. The flaw, rated 8.7 out of 10 on the CVSS v3.1 scale, allows a quadratic-complexity denial-of-service attack: maliciously crafted input with long dotted keys or table paths can cause toml.parse() to become extremely slow, hanging applications that parse untrusted TOML files. Developers using the library are advised to review the advisory and update.

Why now: The advisory is newly published, prompting developers to assess exposure in applications that parse untrusted TOML input.

toml-nodeBinaryMuseENISAEUVD

Open on mastodon →

Evidence

• 🚨 EUVD-2026-107555 📊 Score: 8.7/10 (CVSS v3.1) 📦 Product: toml-node 🏢 Vendor: BinaryMuse 📅 Updated: 2026-10-22 📝 toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse() 🔗 https:// euvd.enisa.europa.eu/vulnerabi lity/EUVD-2026-107555 #… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/3261184