Simple-Plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse().
CWE-1321