CVE-2026-40179 vulnerabilities

Vulnerabilities for packages: mcp-grafana, jaeger, karma, cloud-sql-proxy, minio-object-browser, minio, minio-operator, splunk-otel-collector, telegraf, trillian, node-problem-detector, prometheus-pushgateway, certificate-transparency, istio, tempo, prometheus, keda, mc, datadog-agent, loki...

EUVD-2022-1168

Malicious code in bioql PyPI...

MAL-2025-24315 Malicious code in karma-4vbyb-kbfgk-juniper-project (npm)

The package karma-4vbyb-kbfgk-juniper-project was found to contain malicious code...

Open redirect

The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the returnurl query parameter...

CVE-2022-0437

Cross-site Scripting XSS - DOM in NPM karma prior to 6.3.14...