@21cnfe/onekit-mp-cli (2.0.1), @alitajs/aconsole (>=2.8.2, <=2.9.0) +36 more potentially affected by CVE-2023-30363 via vconsole (>=3.2.0, <=3.15.0)

vconsole NPM version =3.2.0, =2.8.2, =2.8.2, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.2, =0.0.8, =0.0.1, =0.1.0, =0.3.3 and more Source cves: CVE-2023-30363 Source advisory: OSV:GHSA-F737-3FH6-JF6W...

CVE-2023-30363

vConsole v3.15.0 has a prototype pollution flaw caused by incorrect key/value resolution in setOptions within core.ts. The issue is described as high-severity (CVSS v3.1: 9.8, CRITICAL) with network attack vector, no exploitation details are provided in the included documents, and a concrete reme...