Hi,
There is a critical vulnerability found in plist which is used in simple-plist. According to below commit this has been fixed in plist and simple-plist.
wollardj/simple-plist#60
Could you please update simple-plist package to 1.3.1 version
Thanks,
Sujay