Threats affecting pkg:npm/plist.js

plist.js versions before 5.0.1 contain a vulnerability in the binary property-list parser that allows unauthenticated attackers to cause a denial of service by triggering exponential memory growth. This is due to uncontrolled recursive resolution of shared object references, leading to an out-of-memory crash.