MEDIUM
sunnyadn
CVE published 2026-08-14
CVE-2026-50029
A vulnerability in the js-toml TOML parser for JavaScript, prior to version 1.1.2, allows for silent overwriting of values when duplicate keys are present, leading to potential type confusion and unexpected behavior in host applications. The vulnerability arises from the parser's incorrect handling of duplicate keys using `if (object[key])` instead of `if (key in object)`. This can result in structural ty [truncated]