A high-severity prototype pollution vulnerability in the toon-format toon library allows unauthenticated remote attackers to potentially achieve remote code execution.

This is an Improperly Controlled Modification of Object Prototype Attributes (CWE-1321) vulnerability. An unauthenticated attacker can supply malicious TOON data containing keys such as proto, constructor, or prototype to pollute the global Object.prototype, potentially leading to application instability or code execution.

This vulnerability poses a significant risk to applications processing LLM prompts or serialized data using the toon library. Successful exploitation may result in unauthorized code execution, system-wide denial of service, or data corruption, severely impacting business continuity and data integrity. Given the CVSS score of 8.3, this should be treated as a high-priority remediation task.

Immediate Action: Update the @toon-format/toon package to version 2.3.1 or later immediately.

Proactive Monitoring: Review application logs for unusual inputs or unexpected runtime behaviors, specifically monitoring for errors related to object property access or prototype modifications.

Compensating Controls: Implement input validation to strictly sanitize or reject serialized data containing reserved keys like proto or constructor before passing it to the decoder.

Public Exploit Available: Unknown

The potential for remote code execution makes this vulnerability a critical concern for any system utilizing the toon library for data serialization. IT administrators must prioritize the update to version 2.3.1 across all development and production environments to neutralize this threat. Delaying this patch exposes the application to unnecessary risk from potential future exploitation of this prototype pollution vector.