Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-22912
9.8
CRITICALCVSS v3
Published
February 17, 2022
CVSS v2
7.5 HIGH
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
Prototype pollution vulnerability via .parse() in Plist before v3.0.4 allows attackers to cause a Denial of Service (DoS) and may lead to remote code execution.
NPM
TooTallNate/plist.js
GitHubApple property list parser/builder for Node.js and browsers — supports XML, binary (bplist), and OpenStep formats
GitHubApple property list parser/builder for Node.js and browsers — supports XML, binary (bplist), and OpenStep formatsNVD
@types/plist
NPM