EUVD-2023-1281

Malicious code in bioql PyPI...

Prototype Pollution

vconsole is vulnerable to Prototype Pollution. An attacker can inject properties into existing prototypes via the setOption function of core.ts and modify the proto attribute in the keyOrObj parameter...

@55hudong/base-module (>=0.0.1 <=0.0.2), @dingxihu/react-mobile-template (=1.0.0) +22 more potentially affected by CVE-2023-30363 via vconsole (>=2.5.2 <=3.15.0)

vconsole NPM version =2.5.2, =0.0.1, =0.0.1, =0.1.0, =0.2.1, =0.0.5, =0.0.35, =1.12.1, =1.1.2, =1.0.0, =0.0.1, =0.0.5, =0.2.3-beta and more Source cves: CVE-2023-30363 Source advisory: OSV:GHSA-F737-3FH6-JF6W...