Описание
Prototype pollution in Plist before 3.0.5 can cause denial of service
Prototype pollution vulnerability via .parse() in Plist allows attackers to cause a Denial of Service (DoS) and may lead to remote code execution.
Пакеты
Наименование
plist
npm
Затронутые версииВерсия исправления
< 3.0.5
3.0.5
Связанные уязвимости
CVSS3: 9.8
nvd
почти 4 года назад
Prototype pollution vulnerability via .parse() in Plist before v3.0.4 allows attackers to cause a Denial of Service (DoS) and may lead to remote code execution.