CVE-2020-7710: 
JavaScript vulnerability analysis and mitigation

CVE-2020-7710 affects the safe-eval npm package, which is designed to be a safer version of eval(). The vulnerability was disclosed on February 28, 2020, and published on August 21, 2020. This sandbox escape vulnerability affects all versions of the safe-eval package, with no fixed version available (Snyk).

The vulnerability is classified with a CVSS v3.1 base score of 8.1 (High) by Snyk and 9.8 (Critical) by NVD. The vulnerability allows attackers to escape the sandbox environment and execute arbitrary commands on the host machine. The attack complexity is rated as high, requiring no privileges or user interaction, with unchanged scope and high impact on confidentiality, integrity, and availability (Snyk).

The vulnerability can lead to a complete compromise of the system's confidentiality, integrity, and availability. When successfully exploited, it allows attackers to execute arbitrary system commands on the host machine, potentially leading to complete system compromise (Snyk).

A proof-of-concept exploit exists and was publicly disclosed. The exploit works by manipulating Error objects and their prototypes to escape the sandbox environment and gain access to Node.js's process object, ultimately allowing command execution through child_process module (GitHub Issue).

There is no fixed version available for the safe-eval package. The recommended action is to discontinue the use of this package and find alternative solutions for evaluating untrusted code (Snyk).