VYPR

js-toml

by Js Toml

CVEs (1)

  • CVE-2026-50029medJun 26, 2026
    risk 0.26cvss epss

    ### Summary `js-toml`'s interpreter checks whether a key already exists in a parser-built container with `if (object[key])` instead of `if (key in object)`. When the prior value is a falsy primitive — `false`, `0`, `0n`, `0.0`, `-0`, or `""` — the duplicate-key branch is…