Intel

AIKIDO-2025-10529

js-toml is vulnerable to Prototype Pollution

Prototype PollutionCVE-2025-54803 Published Aug 4, 2025

75

High Risk

This Affects:

jsjs-toml
0.0.1 - 1.0.1
Fixed in 1.0.2
Are you affected? Scan for Free

TL;DR

Affected versions of this package are vulnerable to prototype pollution, which could allow attackers to manipulate object properties and impact application behavior.

Who does this affect?

You are affected if you are using a version which is within vulnerability ranges

Background info

js-toml is vulnerable to Prototype Pollution in versions 0.0.1 - 1.0.1.

How to fix this

Upgrade the js-toml library to the patch version.