MEDIUM5.4

GHSA-rc3x-jf5g-xvc5

Open redirect in karma

Quick fix

GHSA-rc3x-jf5g-xvc5 — karma: upgrade to the fixed version with the command below.

npm install karma@6.3.16

Details

Karma before 6.3.16 is vulnerable to Open Redirect due to missing validation of the return_url query parameter.

Are you affected?

Enter the version of the package you're using.

Affected packages

Introduced in: 0Fixed in: 6.3.16

Fixnpm install karma@6.3.16

References