@toon-format/toon vulnerabilities

CVEs whose affected-version data names the @toon-format/toon package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-82404High· 8.3

3w ago

TOON is a compact, human-readable serialization of JSON data for LLM prompts

TOON is a compact, human-readable serialization of JSON data for LLM prompts. Prior to 2.3.1, decoding attacker-controlled TOON with a __proto__, constructor, or prototype key wrote through the object prototype chain instead of creating …

▾ Twilighttoon-format · @toon-format/toonEPSS 0.68%via NVD