Mmastodon TechnologyCybersecurity first seen 3 d ago, last 3 d ago, peak #12

toml-node vulnerability rated 8.7 could crash Node applications

Original: 🚨 EUVD-2026-107552 📊 Score: 8.7/10 (CVSS v3.1) 📦 Product: toml-node 🏢 Vendor: BinaryMuse 📅 Updated: 2026-10-22 📝 toml-no

A high-severity vulnerability, EUVD-2026-107552, has been published for toml-node, the TOML parser maintained by BinaryMuse. The flaw carries a CVSS v3.1 score of 8.7 and allows quadratic-complexity denial of service via many array-of-tables headers passed to toml.parse(). Security trackers updated the entry on 22 October 2026, and developers relying on the parser are expected to check whether their versions need patching.

Why now: A newly catalogued high-severity denial-of-service flaw in a widely used Node.js TOML parser prompts developers to check their dependencies.

toml-nodeBinaryMuseENISANode.js

Open on mastodon →

Evidence

• 🚨 EUVD-2026-107552 📊 Score: 8.7/10 (CVSS v3.1) 📦 Product: toml-node 🏢 Vendor: BinaryMuse 📅 Updated: 2026-10-22 📝 toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse() 🔗 https:// euvd.enisa.europa.eu/vulnerabi lity/EUVD-2026-107552 # cybersecurity… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/3261185