CVE-2026-114142 - toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype
CVE ID :CVE-2026-114142 Published : Oct. 21, 2026, 9:17 p.m. | 49 minutes ago Description :toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() can write attacker-controlled properties to Object.prototype because quoteDottedString() in lib/compiler.js produces...