toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()

影響: npm:toml <= 5.0.0 → 5.0.1

toml.parse() is vulnerable to a quadratic-complexity (O(n²)) denial-of-service via many array-of-tables ([[name]]) headers. addTableArray() in lib/compiler.js rescans two entire bookkeeping Sets on every [[name]] header without pruning unrelated or distinct entries, so a document containing n such headers costs O(n²) compiler work. A ~321KB document of 20,000 distinct-named [[name]] blocks takes ~10.3 seconds to parse — a completely ordinary-looking TOML shape (a flat settings block plus one or…

GitHub Advisory Databaseで読む

2026/10/23 01:38、GitHub Advisory Databaseが「toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()」を公開しました (種別: 脆弱性アドバイザリ)。重大度は「重要」(high) です。関連する技術: JavaScript / Node.js。CVE: CVE-2026-114141。