CVE-2026-16634

Name of the Vulnerable Software and Affected Versions TOML::XS versions prior to 0.06

Description The software bundles an unsupported version of the tomlc99 library, which contains an uncontrolled recursion flaw. This occurs when the from toml() function processes untrusted TOML data containing deeply-nested documents, potentially leading to a stack overflow. Uncontrolled recursion is a condition where a function calls itself without a proper termination condition, eventually exhausting the allocated stack memory.

Recommendations Update to version 0.06 or later.