CVE-2020-7673

CVE-2020-7673 describes an arbitrary code execution vulnerability in node-extend versions up to 0.2.0, where user-supplied input to the 'A' argument of the 'extend' function is executed via 'eval'. This critical vulnerability, with a CVSS score of 9.8, allows unauthenticated attackers to achieve full compromise of confidentiality, integrity, and availability over the network with low attack complexity. While highly severe, there is currently no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.