CVE-2022-26260

Name of the Vulnerable Software and Affected Versions Simple-Plist version 1.3.0

Description The issue is related to a prototype pollution vulnerability. This vulnerability can be exploited via the parse() function.

Recommendations For Simple-Plist version 1.3.0, consider avoiding the use of the parse() function until a patch is available. As a temporary workaround, restrict the input to the parse() function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.