Malicious code in karma-i-ua (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7925e09531fca797d5e885bb3eb62947464435339f718d7e3c1bb97dbd311740 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-547 Malicious code in karma-i-ua (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7925e09531fca797d5e885bb3eb62947464435339f718d7e3c1bb97dbd311740 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-550 Malicious code in karma-jquery2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55d521035684c4dbe2c48fd0ee90ce405fbfb292a771e6c278ad707668d648a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-551 Malicious code in karma-wait-for-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4363de6912d277a4595653035e6e7dda06aae7a365147d88a2a349314e6f3f15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-549 Malicious code in karma-jasmine-i-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed0afb956ba7f377036f0c8ef4717a97760b7a00263c1d791ec61995e323cbe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-548 Malicious code in karma-jasmine-i-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e549b03e79b04aa24627294bb5599da9fb989a712bfbe3a6048c97bed62778b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Grunt-karma vulnerable to prototype pollution

Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js...

@chinchilla-software/angular-tooltip (=1.2.1), @creatartis/creatartis-grunt (>=0.0.16-alpha <=0.0.16-beta) +84 more potentially affected by CVE-2022-37602 via grunt-karma (>=0.10.1 <=3.0.2)

grunt-karma NPM version =0.10.1, =0.0.16-alpha, =6.0.0, =2.0.9, =4.8.13, =5.1.4, =1.0.0, =3.3.15, =2.6.0, =0.1.7, =0.0.1, =0.0.1, =1.0.0 - @sap/grunt-sapui5-bestpractice-build =1.3.52 and more Source cves: CVE-2022-37602 Source advisory: OSV:GHSA-HCJ4-XF6X-63WJ...

GHSA-HCJ4-XF6X-63WJ Grunt-karma vulnerable to prototype pollution

Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js...

CVE-2022-37602

Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js...

AZL-45309 CVE-2022-37602 affecting package js-jquery 3.5.0-4

Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js...

Code injection

Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js...

CVE-2022-37602

Summary : CVE-2022-37602 is a prototype pollution vulnerability in the npm package grunt-karma 4.0.1 (karma-runner integration), reported across multiple sources. The issue arises via the key variable in grunt-karma.js, enabling an attacker to contaminate object prototypes. CVSSv3.1 base metrics ...

CVE-2022-37602

Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js...

grunt-karma 安全漏洞

grunt-karma is a grunt plugin for Karma by karma-runner individual developers. A security vulnerability exists in karma-runner grunt-karma version 4.0.1, which stems from a prototype contamination vulnerability via the key variable in grunt-karma.js...

CVE-2022-37602

Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js...

PT-2022-24023 · Unknown · Grunt-Karma +1

Name of the Vulnerable Software and Affected Versions: karma-runner grunt-karma version 4.0.1 Description: The issue is related to a prototype pollution vulnerability in the karma-runner grunt-karma. It occurs via the key variable in grunt-karma.js. Recommendations: For version 4.0.1, consider...

CVE-2022-37602

Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js...

Malicious code in karma-cuj-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c86cac65926436f48931d5240c93bfeb7ea537f38444c504bcd892caad6234c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4109 Malicious code in karma-cuj-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c86cac65926436f48931d5240c93bfeb7ea537f38444c504bcd892caad6234c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...