CVE-2022-0437

2022-02-0502:15:06

Google

osv.dev

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.6%

JSON

Cross-site Scripting (XSS) - DOM in NPM karma prior to 6.3.14.

CPENameOperatorVersion
karmaeq0.13.0-rc.7
karmaeq0.0.6
karmaeq0.11.3
karmaeq0.12.16
karmaeq0.12.26
karmaeq0.13.20
karmaeq5.0.5
karmaeq5.0.7
karmaeq6.0.2
karmaeq2.0.5

Name	Operator	Version
karma	eq	0.13.0-rc.7
karma	eq	0.0.6
karma	eq	0.11.3
karma	eq	0.12.16
karma	eq	0.12.26
karma	eq	0.13.20
karma	eq	5.0.5
karma	eq	5.0.7
karma	eq	6.0.2
karma	eq	2.0.5

Rows per page:

1-10 of 2121

References

github.com/karma-runner/karma/commit/839578c45a8ac42fbc1d72105f97eab77dd3eb8a

huntr.dev/bounties/64b67ea1-5487-4382-a5f6-e8a95f798885