CVE-2026-124078 plist.js before 5.0.1 Uncontrolled Resource Consumption via Binary Parser

plist.js npm package 'plist' before 5.0.1 contains an uncontrolled resource consumption vulnerability in the binary property-list parser parseBinary that allows unauthenticated attackers to crash a Node.js process by exploiting unmemoized recursive resolution of shared object references for array...