CVE-2022-0437: medium-severity vulnerability in karma-runner/karma
Cross-site Scripting (XSS) - DOM in karma-runner/karma
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
33Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 5.4epss 15%
Cross-site Scripting (XSS) - DOM in NPM karma prior to 6.3.14.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Affected products
karma-runner · karma-runner/karma