[ Vendor · 4 CVEs ]
BinaryMuse
CVEs affecting BinaryMuse published in the last 30 days, plus any BinaryMuse CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-114144 | 21 Oct 2026 | CVSS 7.5 | toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse()toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() passes unbounded hexadecimal, octal, binary, and decimal digit… | Fix |
| CVE-2026-114141 | 21 Oct 2026 | CVSS 8.7 | toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, the toml.parse() compiler's addTableArray() function in lib/compiler.js… | Fix |
| CVE-2026-114142 | 21 Oct 2026 | CVSS 8.8 | toml-node: Prototype pollution: parsing a TOML document can write to Object.prototypetoml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() can write attacker-controlled properties to Object.prototype… | Fix |
| CVE-2026-114143 | 21 Oct 2026 | CVSS 8.7 | toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse()toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() repeatedly slices and rejoins every path prefix in… | Fix |