[GitHub] [cordova-node-xcode] Sujay-shetty opened a new issue #124: Critical vulnerability in simple-plist package (Prototype Pollution using .parse())

[GitBox <gi...@apache.org>]

Sujay-shetty opened a new issue #124:
URL: https://github.com/apache/cordova-node-xcode/issues/124


   Hi,
   
   There is a critical vulnerability found in plist which is used in simple-plist. According to below commit this has been fixed in plist and simple-plist.
   
   https://github.com/wollardj/simple-plist/issues/60
   
   Could you please update simple-plist package to 1.3.1 version
   
   Thanks,
   Sujay


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org

[GitHub] [cordova-node-xcode] breautek commented on issue #124: Critical vulnerability in simple-plist package (Prototype Pollution using .parse())

[GitBox <gi...@apache.org>]

breautek commented on issue #124:
URL: https://github.com/apache/cordova-node-xcode/issues/124#issuecomment-1084541647


   You should be able to reinstall or run `npm update` to have the dependency patched in.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org