CVE-2021-25946: Nconf-Toml Project Nconf-Toml

Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days.

Prototype pollution vulnerability in `nconf-toml` versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution.

Affected products

• Nconf-Toml Project Nconf-Toml: from 0.0.1, up to and including 0.0.2

Published 2021-05-25. Last modified 2026-06-17.