VULNRABLE / Vulnerability / CVE-2026-63376

CVE-2026-63376

HIGH LOW toml GHSA

Exploit verdict: No active-exploit signal

CVSS Score
8
Severity
HIGH
EPSS
Source
GHSA

Summary

toml-node: Prototype Pollution Leads to `Object.prototype` Corruption via `__proto__` Key-Path Desynchronization

What this means

CVE-2026-63376 is a high-severity vulnerability affecting toml, rated CVSS 8. Published September 4, 2026.

View full advisory at GHSA →