428 matches found
CVE-2022-37602
Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js...
CVE-2022-37602
Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js...
grunt-karma 安全漏洞
grunt-karma is a grunt plugin for Karma by karma-runner individual developers. A security vulnerability exists in karma-runner grunt-karma version 4.0.1, which stems from a prototype contamination vulnerability via the key variable in grunt-karma.js...
PT-2022-24023 · Unknown · Grunt-Karma +1
Name of the Vulnerable Software and Affected Versions: karma-runner grunt-karma version 4.0.1 Description: The issue is related to a prototype pollution vulnerability in the karma-runner grunt-karma. It occurs via the key variable in grunt-karma.js. Recommendations: For version 4.0.1, consider...
CVE-2022-37602
Summary : CVE-2022-37602 is a prototype pollution vulnerability in the npm package grunt-karma 4.0.1 (karma-runner integration), reported across multiple sources. The issue arises via the key variable in grunt-karma.js, enabling an attacker to contaminate object prototypes. CVSSv3.1 base metrics ...
Malicious code in karma-cuj-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c86cac65926436f48931d5240c93bfeb7ea537f38444c504bcd892caad6234c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4109 Malicious code in karma-cuj-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c86cac65926436f48931d5240c93bfeb7ea537f38444c504bcd892caad6234c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in karma-failed-tests-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 936e6328b59bb0287da11b8311dd6a223d84756be95bf201c9e3b87d6c056eb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4110 Malicious code in karma-failed-tests-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 936e6328b59bb0287da11b8311dd6a223d84756be95bf201c9e3b87d6c056eb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in karma-puppeteer-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3005f3e78365cd21829f8d44afc5bea7c2d6cb80bcc07951b1a59d5294fbe76b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4111 Malicious code in karma-puppeteer-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3005f3e78365cd21829f8d44afc5bea7c2d6cb80bcc07951b1a59d5294fbe76b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3826 Malicious code in ing-kit-ow-karma-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeb8d4a0c987464a036edcd47b9dd39357090c6cfe95c349319f346576bd80f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in karma-coverage-coffee (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a3094a8cd7786378913d8bd48c938f4a00547f3b77729b6fdcafd532216fe53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4108 Malicious code in karma-coverage-coffee (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a3094a8cd7786378913d8bd48c938f4a00547f3b77729b6fdcafd532216fe53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
karma input validation error vulnerability
karma is a simple tool that allows you to execute JavaScript code in multiple real browsers. karma versions prior to 6.3.16 have a security vulnerability that stems from a lack of validation of returned url query parameters, which could be exploited to perform redirect attacks...
Open Redirect
karma is susceptible to open redirect attacks. The attack exists because the returnurl query parameter is not properly validated, allowing an attacker to inject a malicious URL through to the system...
GHSA-RC3X-JF5G-XVC5 Open redirect in karma
Karma before 6.3.16 is vulnerable to Open Redirect due to missing validation of the returnurl query parameter...
Open redirect in karma
Karma before 6.3.16 is vulnerable to Open Redirect due to missing validation of the returnurl query parameter...
@aws-crypto/example-browser (>=2.2.0, <=3.1.0), @carlosvillu/tester (>=1.0.0-beta.1, <=1.0.0) +52 more potentially affected by CVE-2021-23495 via karma (>=6.1.1, <=6.3.14)
karma NPM version =6.1.1, =2.2.0, =1.0.0-beta.1, =1.0.0-beta.0, =22.0.0-beta.1, =13.0.0-beta.1, =430.0.0, =3.7.0, =3.7.0, =3.7.0, =3.7.0, =0.6.4, =11.0.0-beta.9, =10.21.0, =4.18.0-beta.0, =0.0.0, =0.0.2 and more Source cves: CVE-2021-23495 Source advisory: OSV:GHSA-RC3X-JF5G-XVC5...