~ / search / GHSA-gff7-g5r8-mg8m

GHSA-gff7-g5r8-mg8m

Prototype Pollution in simple-plist

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-26260

Packages

EcosystemPackageAffectedFixed in
npm simple-plist < 1.3.1 1.3.1

Details

As written in the advisory (Markdown source, shown as plain text).

simple-plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse().

References

External links from the advisory. They lead to third-party sites.