{"action":"Upgrade karma to 6.3.14 or later.","affected":[{"fixed":"6.3.14","introduced":"0"}],"component":"karma","cve_ids":["CVE-2022-0437"],"ecosystem":"npm","epss":0.15054,"exploited":false,"fixed_versions":["6.3.14"],"ghsa_id":"GHSA-7x7c-qm48-pq9c","id":"tcs_01M5KFB5JHDGKPDF6PEV5S58V5","modified_at":"2023-11-08T04:07:34.290683Z","published_at":"2022-02-06T00:00:54Z","references":["https://osv.dev/vulnerability/GHSA-7x7c-qm48-pq9c","https://nvd.nist.gov/vuln/detail/CVE-2022-0437","https://github.com/karma-runner/karma/commit/839578c45a8ac42fbc1d72105f97eab77dd3eb8a","https://github.com/karma-runner/karma","https://github.com/karma-runner/karma/releases/tag/v6.3.14","https://huntr.dev/bounties/64b67ea1-5487-4382-a5f6-e8a95f798885"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-7x7c-qm48-pq9c","url":"https://osv.dev/vulnerability/GHSA-7x7c-qm48-pq9c"}],"summary":"Cross-site Scripting in karma"}