CVE-2021-48012

8.2 HIGHpublic exploit available

Published 2026-10-12 · Updated 2026-10-16

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

fast-toml through 0.5.4 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by supplying TOML containing __proto__, constructor or prototype key segments. Attackers can pass [__proto__] or [constructor.prototype] table headers or __proto__.x dotted keys to parse() to pollute all objects, causing denial of service or authorization bypass.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

Weaknesses

CWE-1321

Public exploit & PoC references

https://github.com/Gin-Quin/fast-toml
https://github.com/Gin-Quin/fast-toml/issues/8
https://github.com/Gin-Quin/fast-toml/pull/3

All references

https://github.com/Gin-Quin/fast-toml
https://github.com/Gin-Quin/fast-toml/issues/8
https://github.com/Gin-Quin/fast-toml/pull/3
https://www.vulncheck.com/advisories/fast-toml-through-0.5.4-prototype-pollution-via-proto-keys-in-parsed-toml

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

UNSCOREDCVE-2026-101900PoC
UNSCOREDCVE-2026-101902PoC
UNSCOREDCVE-2026-101904PoC
UNSCOREDCVE-2026-101905PoC
UNSCOREDCVE-2026-101908PoC
UNSCOREDCVE-2026-101909PoC
HIGHCVE-2026-102600PoC
UNSCOREDCVE-2026-102992PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.