@appium/base-plugin (>=1.8.0, <=1.8.1), @appium/execute-driver-plugin (1.0.1) +102 more potentially affected by CVE-2022-22912 via plist (>=3.0.1, <=3.0.4)

plist NPM version =3.0.1, =1.8.0, =1.3.0, =1.2.3, =2.54.2, =5.7.1, =4.6.201905101059, =0.168.0, =1.0.5, =1.40.10, =1.0.0, =0.0.1, =0.0.6 and more Source cves: CVE-2022-22912 Source advisory: OSV:GHSA-4CPG-3VGW-4877...

CVE-2022-22912

Prototype pollution vulnerability via .parse in Plist before v3.0.4 allows attackers to cause a Denial of Service DoS and may lead to remote code execution...

CVE-2022-22912

Prototype pollution vulnerability via .parse in Plist before v3.0.4 allows attackers to cause a Denial of Service DoS and may lead to remote code execution...