logo

Database

Prototype Pollution In simple-plist

Description

Prototype Pollution in simple-plist simple-plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse().

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2022-262602. NVD-2022-262603. OSV-2022-262604. GCVE-2022-26260

References

1. https://github.com/wollardj/simple-plist/issues/602. https://github.com/wollardj/simple-plist/issues/60#issuecomment-10839918403. https://github.com/wollardj/simple-plist/commit/670e22fd6e46549a1d32d1065981e0f58eab98d6

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.