Description
The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query parameter.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | karma | unspecified – < 6.3.16 | 6.3.16 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | karma | < 6.3.16 | 6.3.16 | GHSA-rc3x-jf5g-xvc5 |