TooTallNate/plist.js

TooTallNate/plist.js

Releases12
Frequency1 year 5 months
Last Release
Stars599
Apple property list parser/builder for Node.js and browsers — supports XML, binary (bplist), and OpenStep formats

CVE History

CVEPublishedCVSS v3CVSS v2
9.8 CRITICAL7.5 HIGH

Prototype pollution vulnerability via .parse() in Plist before v3.0.4 allows attackers to cause a Denial of Service (DoS) and may lead to remote code execution.