{"id":"ghsa-ghsa-4qx8-w7c3-pj3p","seq":309566,"kind":"advisory","title":"toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()","url":"https://github.com/advisories/GHSA-4qx8-w7c3-pj3p","permalink":"https://vulnpulse.app/items/ghsa-ghsa-4qx8-w7c3-pj3p","summary":"影響: npm:toml <= 5.0.0 → 5.0.1\ntoml.parse() is vulnerable to a quadratic-complexity (O(n²)) denial-of-service via many array-of-tables ([[name]]) headers. addTableArray() in lib/compiler.js rescans two entire bookkeeping Sets on every [[name]] header without pruning unrelated or distinct entries, so a document containing n such headers costs O(n²) compiler work. A ~321KB document of 20,000 distinct-named [[name]] blocks takes ~10.3 seconds to parse — a completely ordinary-looking TOML shape (a flat settings block plus one or…","severity":"high","techs":["nodejs"],"cves":["CVE-2026-114141"],"tags":["GHSA-4qx8-w7c3-pj3p","toml"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-22T16:38:44.000Z","fetched_at":"2026-10-22T20:09:55.169Z"}