Prototype pollution vulnerability via .parse() in Plist before v3.0.4 allows attackers to cause a Denial of Service (DoS) and may lead to remote code execution.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.02553·Published 2022-02-17·Fixed in 3.0.5CWE-1321