Threats tagged 'ghsa-rwwr-mcmf-whxp'

plist.js (npm package 'plist') versions before 5.0.1 contain a vulnerability in the binary property-list parser that allows unauthenticated attackers to cause a denial of service by triggering uncontrolled resource consumption. This is achieved by crafting a small binary plist with self-referencing object indices that cause exponential recursive calls and memory growth, crashing the Node.js process.