Skip to content
OpenAdvisories

Package · Maven

io.karatelabs:karate-core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-2c85-rfcc-g74j

    Karate Mock Server RCE via embedded expression evaluation of request-derived data

    ### Summary Karate Mock Server can execute embedded expressions found in attacker-controlled HTTP request data when a Mock Server feature assigns request-derived values such as `request`, `requestHeaders`, or `requestParams` to variables. In affected scenario…

    io.karatelabs:karate-core Maven