CVE-2022-0437
1 advisory.
npm/karma CVE-2022-0437: medium 6.1, EPSS 15.05%
Cross-site Scripting in karma
Action: Upgrade karma to 6.3.14 or later.
npm i karma@6.3.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.3.14 | - |
Fixed versions
| 6.3.14 |
Sources
- osv: GHSA-7x7c-qm48-pq9c
- https://nvd.nist.gov/vuln/detail/CVE-2022-0437
- https://github.com/karma-runner/karma/commit/839578c45a8ac42fbc1d72105f97eab77dd3eb8a
- https://github.com/karma-runner/karma
- https://github.com/karma-runner/karma/releases/tag/v6.3.14
- https://huntr.dev/bounties/64b67ea1-5487-4382-a5f6-e8a95f798885
CVE-2022-0437 · published · modified · JSON