EUVD-2026-118495

plist.js npm package 'plist' before 5.0.1 contains an uncontrolled resource consumption vulnerability in the binary property-list parser parseBinary that allows unauthenticated attackers to crash a Node.js process by exploiting unmemoized recursive resolution of shared object references for array...