Search vulnerabilities

Results 2

Export CSV
CVE-2022-0437

Cross-site Scripting (XSS) - DOM in karma-runner/karma

Cross-site Scripting (XSS) - DOM in NPM karma prior to 6.3.14.

CVSS 3.1 · 6.1 Medium EPSS 15.1% KEV · Not listed
Vendors
Products
CVE-2021-23495

Open Redirect

The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query parameter.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Products