Critical severity9.8NVD Advisory· Published Mar 22, 2022· Updated Jun 17, 2026
CVE-2022-26260
CVE-2022-26260
Description
Simple-Plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse().
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
simple-plistnpm | < 1.3.1 | 1.3.1 |
Affected products
3- cpe:2.3:a:simple-plist_project:simple-plist:1.3.0:*:*:*:*:*:*:*
- Simple-Plist/Simple-Plistdescription
Patches
Vulnerability mechanics
References
5- github.com/wollardj/simple-plist/issues/60nvdExploitIssue TrackingThird Party AdvisoryWEB
- github.com/advisories/GHSA-gff7-g5r8-mg8mghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2022-26260ghsaADVISORY
- github.com/wollardj/simple-plist/commit/670e22fd6e46549a1d32d1065981e0f58eab98d6ghsaWEB
- github.com/wollardj/simple-plist/issues/60ghsaWEB
News mentions
0No linked articles in our index yet.