VDB
GHSA-r4xh-jqrq-34v2
GHSA-r4xh-jqrq-34v2
PUBLISHED
CVSS 5.300000190734863 MEDIUM
smol-toml: Quadratic-time parse() from parseKey rescanning to end of document on each key line
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| npm | smol-toml | |
| chainguard | prism | 0 |
| wolfi | prism | 0 |
| wolfi | lerna | 0 |
| chainguard | wazuh-dashboard | 0 |
| wolfi | renovate | 0 |
| chainguard | wazuh-dashboard-fips | 0 |
| npm | smol-toml | 0 |
| chainguard | renovate | 0 |
Timeline
- Oct 5, 2026 CVE Published
References
- https://github.com/advisories/GHSA-r4xh-jqrq-34v2 advisory
- https://github.com/squirrelchat/smol-toml/security/advisories/GHSA-r4xh-jqrq-34v2 url
- https://github.com/squirrelchat/smol-toml/commit/99102aa57fc932f760ea9c15b4cf1c181f952d24 patch
- https://github.com/squirrelchat/smol-toml/releases/tag/v1.9.0 url