{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.0.1"}],"component":"grunt-karma","cve_ids":["CVE-2022-37602"],"ecosystem":"npm","epss":0.02123,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-hcj4-xf6x-63wj","id":"tcs_01M5KFTRMRADCP5JNW2N8ZX5CP","modified_at":"2023-11-08T04:10:09.177745Z","published_at":"2022-10-14T12:00:16Z","references":["https://osv.dev/vulnerability/GHSA-hcj4-xf6x-63wj","https://nvd.nist.gov/vuln/detail/CVE-2022-37602","https://github.com/karma-runner/grunt-karma/issues/311","https://github.com/karma-runner/grunt-karma","https://github.com/karma-runner/grunt-karma/blob/45b925964f55870f375c6e670d9945b223c984f5/tasks/grunt-karma.js#L109","https://github.com/karma-runner/grunt-karma/blob/45b925964f55870f375c6e670d9945b223c984f5/tasks/grunt-karma.js#L26"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-hcj4-xf6x-63wj","url":"https://osv.dev/vulnerability/GHSA-hcj4-xf6x-63wj"}],"summary":"Grunt-karma vulnerable to prototype pollution"}