THREATOPS
THREAT OPS › Threat News › [GHSA] GHSA-82x6-q7mm-w9cf (high) — toml-node: Uncontrolled Recursion

[GHSA] GHSA-82x6-q7mm-w9cf (high) — toml-node: Uncontrolled Recursion

medgithub_advisoriesPublished 2026-09-03

GHSA-82x6-q7mm-w9cf Severity: high CVE: CVE-2026-77465

toml-node: Uncontrolled Recursion

### Summary

`toml.parse()` crashes with an uncaught `RangeError: Maximum call stack size exceeded` when parsing deeply nested arrays or inline tables. The parser is generated by **Peggy 5.1.0** (a PEG parser generator) as a recursive-descent parser; the value rule mutually recurses with the array and inlin

MITRE ATT&CK techniques

Indicators of compromise

Original source: https://github.com/advisories/GHSA-82x6-q7mm-w9cf