Description
Simple-Plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse().
Remediation
References
https://github.com/wollardj/simple-plist/issues/60
Related Vulnerabilities
CVE-2021-44868 Vulnerability in maven package net.mingsoft:ms-mcms
CVE-2022-0672 Vulnerability in maven package org.eclipse.lemminx:lemminx-parent
CVE-2016-5005 Vulnerability in maven package org.apache.archiva:archiva-webapp
CVE-2021-23391 Vulnerability in npm package calipso
CVE-2022-24278 Vulnerability in npm package convert-svg-core