CVE-2020-7718

CVE-2020-7718 is a critical Prototype Pollution vulnerability affecting all versions of the 'gammautils' package. This flaw, found in the deepSet and deepMerge functions, allows an attacker to inject arbitrary properties into JavaScript object prototypes. With a CVSS score of 9.8, it presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been observed, the high FAUCET Risk Score indicates its potential for severe consequences if exploited.