npm package
simple-plist
pkg:npm/simple-plist
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-26260 | Cri | 9.8 | < 1.3.1 | 1.3.1 | Mar 22, 2022 | Simple-Plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse(). |
- affected < 1.3.1fixed 1.3.1
Simple-Plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse().