CVE-2026-85730
1 advisory.
npm/smol-toml CVE-2026-85730: high, EPSS 0.52%
smol-toml: Denial of Service via malformed TOML documents
Action: Upgrade smol-toml to 1.7.1 or later.
npm i smol-toml@1.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.1 | - |
Fixed versions
| 1.7.1 |
Sources
- osv: GHSA-7w5x-hrqm-74c2
- https://github.com/squirrelchat/smol-toml/security/advisories/GHSA-7w5x-hrqm-74c2
- https://nvd.nist.gov/vuln/detail/CVE-2026-85730
- https://github.com/squirrelchat/smol-toml/commit/30f5c367d946b695f379b5d4f0946b2f0a0a8c2f
- https://github.com/squirrelchat/smol-toml
- https://github.com/squirrelchat/smol-toml/releases/tag/v1.7.1
- https://medium.com/@ravindu.lakmina1/seven-bytes-that-freeze-a-node-js-server-forever-the-story-of-cve-2026-85730-3213328b38f0
CVE-2026-85730 · published · modified · JSON