npm/tome CVE-2026-114142: high 8.8
toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype
Action: Upgrade tome to 5.0.1 or later.
npm i tome@5.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.1 | - |
Fixed versions
| 5.0.1 |
Sources
- osv: GHSA-h895-cgqg-jf52
- nvd: CVE-2026-114142
- https://github.com/BinaryMuse/toml-node/security/advisories/GHSA-h895-cgqg-jf52
- https://github.com/BinaryMuse/toml-node/commit/609c873fffea0a27ebe5b4dd098eed2b3daf3606
- https://github.com/BinaryMuse/toml-node
- https://github.com/BinaryMuse/toml-node/releases/tag/v5.0.1
CVE-2026-114142 · published · modified · JSON