~ / search / GHSA-4cpg-3vgw-4877

GHSA-4cpg-3vgw-4877

Prototype pollution in Plist before 3.0.5 can cause denial of service

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-22912

Packages

EcosystemPackageAffectedFixed in
npm plist < 3.0.5 3.0.5

Details

As written in the advisory (Markdown source, shown as plain text).

Prototype pollution vulnerability via `.parse()` in Plist allows attackers to cause a Denial of Service (DoS) and may lead to remote code execution.

References

External links from the advisory. They lead to third-party sites.