Malicious code in karma-failed-tests-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 936e6328b59bb0287da11b8311dd6a223d84756be95bf201c9e3b87d6c056eb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4110 Malicious code in karma-failed-tests-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 936e6328b59bb0287da11b8311dd6a223d84756be95bf201c9e3b87d6c056eb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in karma-puppeteer-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3005f3e78365cd21829f8d44afc5bea7c2d6cb80bcc07951b1a59d5294fbe76b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4111 Malicious code in karma-puppeteer-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3005f3e78365cd21829f8d44afc5bea7c2d6cb80bcc07951b1a59d5294fbe76b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3826 Malicious code in ing-kit-ow-karma-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeb8d4a0c987464a036edcd47b9dd39357090c6cfe95c349319f346576bd80f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in karma-coverage-coffee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a3094a8cd7786378913d8bd48c938f4a00547f3b77729b6fdcafd532216fe53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4108 Malicious code in karma-coverage-coffee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a3094a8cd7786378913d8bd48c938f4a00547f3b77729b6fdcafd532216fe53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

karma input validation error vulnerability

karma is a simple tool that allows you to execute JavaScript code in multiple real browsers. karma versions prior to 6.3.16 have a security vulnerability that stems from a lack of validation of returned url query parameters, which could be exploited to perform redirect attacks...

Open Redirect

karma is susceptible to open redirect attacks. The attack exists because the returnurl query parameter is not properly validated, allowing an attacker to inject a malicious URL through to the system...

@abc.xyz/drop-down-treeview (>=0.0.15 <=0.0.16), @abcpros/bitcore-build (>=8.25.29 <=8.25.30) +1332 more potentially affected by CVE-2021-23495 via karma (>=0.10.2 <=6.3.14)

karma NPM version =0.10.2, =0.0.15, =8.25.29, =1.0.0, =0.1.1, =0.1.14, =1.0.2, =1.0.0, =1.2.0, =0.2.0-preview.3, =5.0.0, =0.23.0, =2.3.0, =2.11.0 and more Source cves: CVE-2021-23495 Source advisory: OSV:GHSA-RC3X-JF5G-XVC5...

Open redirect in karma

Karma before 6.3.16 is vulnerable to Open Redirect due to missing validation of the returnurl query parameter...

GHSA-RC3X-JF5G-XVC5 Open redirect in karma

Karma before 6.3.16 is vulnerable to Open Redirect due to missing validation of the returnurl query parameter...

CVE-2021-23495

The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the returnurl query parameter...

CVE-2021-23495

The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the returnurl query parameter...

Open redirect

The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the returnurl query parameter...

CVE-2021-23495 Open Redirect

The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the returnurl query parameter...

CVE-2021-23495

Summary: Karma (JavaScript test runner) before 6.3.16 is vulnerable to Open Redirect due to missing validation of the return_url query parameter. Affected component: karma

UIkarma 输入验证错误漏洞

karma is a simple tool that allows you to execute JavaScript code in multiple real browsers. karma versions prior to 6.3.16 have a security vulnerability that stems from a lack of validation of returned url query parameters, which could be exploited to perform redirect attacks...

karma-mojo enables OS Command Injection

karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...

GHSA-PF8J-VHG8-XMC3 karma-mojo enables OS Command Injection

karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...