Approved changes feed: RSS · Atom
cpe:2.3:a:squirrelchat:smol-toml:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Squirrelchat (e1efe89b-a634-5cb8-a196-edac76f1ed9a) |
|---|---|
| Product | Smol Toml (87945af7-d71d-54d7-8d1b-3a4acb4d1eac) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-85730 |
vulnerable | 2026-09-16 04:33:08.218021 |
smol-toml: Denial of Service via malformed TOML documents
smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse() can enter an infinite loop when a value inside an array or inline table is followed by a comment with no trailing newline. In src/util.ts, skipUntil() calls indexOfNewline(), receives -1 at the end of input, and resets the cursor to the beginning of the string instead of leaving the structure scan. The parser then hangs indefinitely and can consume a service's processing capacity when an application parses attacker-controlled TOML. This issue is fixed in version 1.7.1.
Published: 2026-09-04T15:21:14.948Z
Updated: 2026-09-09T16:34:08.718Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.