Skip to content
OpenAdvisories

Package · npm

karma

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2021-23495

    Open Redirect

    The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query parameter.

    karma npm
  • Medium 5.4
    CVE-2022-0437 Scanner template EPSS 15%

    Cross-site Scripting (XSS) - DOM in karma-runner/karma

    Cross-site Scripting (XSS) - DOM in NPM karma prior to 6.3.14.

    karma-runner karma-runner/karma karma npm