MEDIUM6.1
GHSA-7x7c-qm48-pq9c
Cross-site Scripting in karma
Quick fix
GHSA-7x7c-qm48-pq9c — karma: upgrade to the fixed version with the command below.
npm install karma@6.3.14Details
karma prior to version 6.3.14 contains a cross-site scripting vulnerability.
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://nvd.nist.gov/vuln/detail/CVE-2022-0437[ADVISORY]
- https://github.com/karma-runner/karma/commit/839578c45a8ac42fbc1d72105f97eab77dd3eb8a[WEB]
- https://github.com/karma-runner/karma[WEB]
- https://github.com/karma-runner/karma/releases/tag/v6.3.14[WEB]
- https://huntr.dev/bounties/64b67ea1-5487-4382-a5f6-e8a95f798885[WEB]