Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-63376
By Yoav Nesher |
4 September 2026
toml-node parsing flaws enable prototype pollution and stack exhaustion DoS
In toml, CVE-2026-63376 allows prototype pollution through crafted toml.parse() table paths, potentially causing process-wide DoS, logic or authorization bypasses, and conditional gadget-based code execution. CVE-2026-77465 allows deeply nested arrays or inline tables to exhaust the Node.js call stack and crash the process. CVE-2026-63376 affects versions `