Description
Simple-Plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse().
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | simple-plist | < 1.3.1 | 1.3.1 | GHSA-gff7-g5r8-mg8m |
Critical · 9.8
CVE-2022-26260
EUVD-2022-1425GHSA-gff7-g5r8-mg8m
Prototype Pollution in simple-plist
Published Mar 22, 2022 · Updated Aug 3, 2024 · Assigned by mitre