~ / search / GHSA-hcj4-xf6x-63wj

GHSA-hcj4-xf6x-63wj

Grunt-karma vulnerable to prototype pollution

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-37602

Packages

EcosystemPackageAffectedFixed in
npm grunt-karma <= 4.0.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the `key` variable in `grunt-karma.js`.

References

External links from the advisory. They lead to third-party sites.