toml for npm rebuilt every dotted key's full path at every segment, so one long key cost O(n²) time and memory. A 100 KB key froze the event loop for 6.8 seconds, and around 200 KB crashed Node with an out-of-memory error that try/catch can't stop. GHSA-9j65-hcg3-gc64, fixed in 5.0.1.
Security researcher focused on web application vulnerabilities, exploit development,
and responsible disclosure. Seeking a 4-month Winter 2027 co-op (January - April) in security,
DevSecOps, cloud or AI automation in Toronto/GTA.