{"action":"Upgrade karma to 6.3.16 or later.","affected":[{"fixed":"6.3.16","introduced":"0"}],"component":"karma","cve_ids":["CVE-2021-23495"],"ecosystem":"npm","epss":0.00884,"exploited":false,"fixed_versions":["6.3.16"],"ghsa_id":"GHSA-rc3x-jf5g-xvc5","id":"tcs_01M5KG8Q3SNTAA2RTB0N6A1DR0","modified_at":"2025-01-14T09:12:20.734188Z","published_at":"2022-02-26T00:00:38Z","references":["https://osv.dev/vulnerability/GHSA-rc3x-jf5g-xvc5","https://nvd.nist.gov/vuln/detail/CVE-2021-23495","https://github.com/karma-runner/karma/commit/ff7edbb2ffbcdd69761bece86b7dc1ef0740508d","https://github.com/karma-runner/karma","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2412347","https://snyk.io/vuln/SNYK-JS-KARMA-2396325"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-rc3x-jf5g-xvc5","url":"https://osv.dev/vulnerability/GHSA-rc3x-jf5g-xvc5"}],"summary":"Open redirect in karma"}