Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: TooTallNate Clear all filters
TI-2026-86123 CVE-2026-124078 · GHSA-rwwr-mcmf-whxp

Uncontrolled resource consumption in plist.js binary plist parser

Priority LOW 38

plist.js (npm package 'plist') before 5.0.1 contains an uncontrolled resource consumption vulnerability in the binary property-list parser (parseBinary) that allows unauthenticated attackers to crash a Node.js process by…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00361 Published 2026-11-06 Fixed in 5.0.1 CWE-674