@55hudong/base-module (>=0.0.1 <=0.0.2), @dingxihu/react-mobile-template (=1.0.0) +22 more potentially affected by CVE-2023-30363 via vconsole (>=2.5.2 <=3.15.0)

vconsole NPM version =2.5.2, =0.0.1, =0.0.1, =0.1.0, =0.2.1, =0.0.5, =0.0.35, =1.12.1, =1.1.2, =1.0.0, =0.0.1, =0.0.5, =0.2.3-beta and more Source cves: CVE-2023-30363 Source advisory: OSV:GHSA-F737-3FH6-JF6W...

CVE-2023-30363

vConsole v3.15.0 has a prototype pollution flaw caused by incorrect key/value resolution in setOptions within core.ts. The issue is described as high-severity (CVSS v3.1: 9.8, CRITICAL) with network attack vector, no exploitation details are provided in the included documents, and a concrete reme...