CVE-2026-40179 vulnerabilities

Vulnerabilities for packages: telegraf, tempo, trillian, mcp-grafana, grafana-pyroscope, cloud-sql-proxy, datadog-agent, karma, jaeger, istio, minio-object-browser, splunk-otel-collector, loki, minio, certificate-transparency, mc, aws-otel-collector, prometheus-pushgateway, keda, minio-operator...

EUVD-2022-1168

Malicious code in bioql PyPI...

MAL-2025-24315 Malicious code in karma-4vbyb-kbfgk-juniper-project (npm)

The package karma-4vbyb-kbfgk-juniper-project was found to contain malicious code...

Open redirect

The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the returnurl query parameter...

CVE-2022-0437

Cross-site Scripting XSS - DOM in NPM karma prior to 6.3.14...