CVE-2020-7618: 
JavaScript vulnerability analysis and mitigation

The vulnerability CVE-2020-7618 affects the sds package through version 3.2.0. This is a Prototype Pollution vulnerability discovered and disclosed on April 1, 2020. The vulnerability affects the structured data search package 'sds' and allows attackers to manipulate the Object.prototype properties (Snyk Advisory).

The vulnerability exists in the 'set' function located in 'js/set.js' of the sds package. The library could be tricked into adding or modifying properties of the 'Object.prototype' through abuse of this function. The vulnerability has been assigned a CVSS v3.1 base score of 5.3 (Medium), with attack vector being Network, attack complexity Low, requiring no privileges or user interaction (NVD).

When exploited, this vulnerability allows attackers to modify the Object.prototype, which can lead to property injection and potential application behavior manipulation. The vulnerability can affect the integrity of the application by allowing unauthorized modifications to object properties (Snyk Advisory).

The recommended mitigation is to upgrade the sds package to version 4.0.0 or higher, which contains the fix for this vulnerability (Snyk Advisory).