CVE-2020-7679: Casperjs

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

In all versions of package casperjs, the mergeObjects utility function is susceptible to Prototype Pollution.

Affected products

• Casperjs Casperjs: any version

Published 2020-06-19. Last modified 2026-06-17.