{"action":"Upgrade toml to 5.0.1 or later.","affected":[{"fixed":"5.0.1","introduced":"0"}],"component":"toml","cve_ids":["CVE-2026-114144"],"ecosystem":"npm","exploited":false,"fixed_versions":["5.0.1"],"ghsa_id":"GHSA-9qmh-m7c6-f92p","id":"tcs_01M5JMD3KQKCCTM8C086VXMR5K","modified_at":"2026-10-22T16:45:03.728754108Z","published_at":"2026-10-22T16:36:50Z","references":["https://osv.dev/vulnerability/GHSA-9qmh-m7c6-f92p","https://github.com/BinaryMuse/toml-node/security/advisories/GHSA-9qmh-m7c6-f92p","https://nvd.nist.gov/vuln/detail/CVE-2026-114144","https://github.com/BinaryMuse/toml-node/commit/9d52e384f6030932174d1afb0d910154dd62dead","https://github.com/BinaryMuse/toml-node","https://github.com/BinaryMuse/toml-node/releases/tag/v5.0.1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-9qmh-m7c6-f92p","url":"https://osv.dev/vulnerability/GHSA-9qmh-m7c6-f92p"}],"summary":"toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse()"}