THREATOPS
THREAT OPSThreat News › [GHSA] GHSA-7w5x-hrqm-74c2 (high) — smol-toml: Denial of Service via malformed TOML documents

[GHSA] GHSA-7w5x-hrqm-74c2 (high) — smol-toml: Denial of Service via malformed TOML documents

medgithub_advisoriesPublished 2026-09-09

GHSA-7w5x-hrqm-74c2 Severity: high CVE: CVE-2026-85730

smol-toml: Denial of Service via malformed TOML documents

### Summary `parse()` can be forced into an infinite loop when a value inside an array or inline table is followed by a comment that has no trailing newline (i.e. the comment "ends" the document).

The library fails to exit an internal loop when attempting to find the end of the struc

Indicators of compromise

Original source: https://github.com/advisories/GHSA-7w5x-hrqm-74c2