CVE-2026-114142toml-node: Prototype pollution: parsing a TOML document can write to Object.prototypetoml-node: Prototype pollution: parsing a TOML document can write to Object.prototype