Security Advisories (1)
CVE-2026-16634 (2026-07-24)

TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99. The tomlc99 library is no longer maintained, and has an uncontrolled recursion vulnerability publicly reported in the issue tracker. Any caller that passes untrusted TOML to from_toml risks a stack overflow from a deeply-nested document. TOML::XS version 0.06 or later uses the successor tomlc17 library.

NAME

TOML::XS::Document - Object representation of a TOML timestamp

SYNOPSIS

See TOML::XS.

DESCRIPTION

Instances of this class represent a parse of a TOML timestamp.

This class is not directly instantiable.

ACCESSOR METHODS

Any of the following may be undef:

  • year()

  • month()

  • day() (alias: date())

  • hour() (alias: hours())

  • minute() (alias: minutes())

  • second() (alias: seconds())

  • millisecond() (alias: milliseconds())

  • timezone()

OTHER METHODS

$str = OBJ->to_string()

Returns a string that represents OBJ.