Karma Project Karma
2 CVEs affecting Karma Project Karma. Latest disclosed: 2022-02-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-0437 | Medium | 6.1 | 2022-02-05 | Cross-site Scripting (XSS) - DOM in NPM karma prior to 6.3.14. |
CVE-2021-23495 | Medium | 5.4 | 2022-02-25 | The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query parameter. |