NodeJS/karma/1.1.0
Spectacular Test Runner for JavaScript.
https://www.npmjs.com/package/karma
MIT
2 Security Vulnerabilities
Cross-site Scripting in karma
Published date: 2022-02-06T00:00:54Z
CVE: CVE-2022-0437
Links:
- https://nvd.nist.gov/vuln/detail/CVE-2022-0437
- https://github.com/karma-runner/karma/commit/839578c45a8ac42fbc1d72105f97eab77dd3eb8a
- https://huntr.dev/bounties/64b67ea1-5487-4382-a5f6-e8a95f798885
- https://github.com/karma-runner/karma/releases/tag/v6.3.14
- https://github.com/advisories/GHSA-7x7c-qm48-pq9c
karma prior to version 6.3.14 contains a cross-site scripting vulnerability.
Affected versions:
["0.8.0", "0.9.0-dart", "0.8.1", "0.8.2", "0.8.3", "0.9.0", "0.8.4", "0.9.1", "0.8.5", "0.9.2", "0.9.2-dart", "0.9.3", "0.8.6", "0.9.4", "0.8.7", "0.9.5", "0.9.6", "0.8.8", "0.9.7", "0.9.8", "0.10.0", "0.10.1", "0.10.2", "0.11.0", "0.11.1", "0.10.3", "0.10.4", "0.11.2", "0.11.3", "0.10.5", "0.11.4", "0.11.5", "0.10.6", "0.11.6", "0.10.7", "0.11.7", "0.11.8", "0.11.9", "0.10.8", "0.11.10", "0.11.11", "0.11.12", "0.10.9", "0.11.12-dev2", "0.11.13", "0.11.14", "0.12.0", "0.10.10", "0.12.1", "0.12.2", "0.12.3", "0.12.4", "0.12.5", "0.12.6", "0.12.6-beta-43e6e28", "0.12.7", "0.12.8", "0.12.9", "0.12.10", "0.12.11", "0.12.12", "0.12.11-beta-3029418", "0.12.13", "0.12.14", "0.12.15", "0.12.16", "0.12.16-beta-905422d", "0.12.17", "0.12.18", "0.12.19", "0.12.20", "0.12.21", "0.12.22", "0.12.23", "0.12.24", "0.12.24-beta-6cf7955", "0.12.25", "0.12.25-beta-37a7958", "0.12.25-beta-ad5bc24", "0.12.26", "0.12.27", "0.12.28", "0.12.28-beta-b9be580", "0.12.29", "0.12.30", "0.12.31", "0.12.28-beta-f65c864", "0.12.24-dev-test", "0.12.24-dev-socketio10", "0.12.24-dev-socketio10-2", "0.12.32-beta.0", "0.12.32", "0.13.0-rc.0", "0.12.33", "0.13.0-rc.1", "0.12.34", "0.13.0-rc.2", "0.12.35", "0.13.0-rc.3", "0.12.36", "0.13.0-rc.4", "0.12.37", "0.13.0-rc.5", "0.13.0-rc.6", "0.13.0-rc.7", "0.13.0-rc.8", "0.13.0-rc.9", "0.13.0", "0.13.1", "0.13.2", "0.13.3", "0.13.4", "0.13.5", "0.13.6", "0.13.7", "0.13.8", "0.13.9", "0.13.10", "0.13.11", "0.13.12", "0.13.13", "0.13.14", "0.13.15", "0.13.16", "0.13.17", "0.13.18", "0.13.19", "0.13.20", "0.13.21", "0.13.22", "1.0.0", "1.1.0", "1.1.1", "1.1.2", "1.2.0", "1.3.0", "1.4.0", "1.4.1", "1.5.0", "1.6.0", "1.7.0", "1.7.1", "2.0.0", "2.0.2", "2.0.3", "2.0.4", "2.0.5", "3.0.0", "3.1.0", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "4.0.0", "4.0.1", "4.1.0", "4.2.0", "4.3.0", "4.4.0", "4.4.1", "5.0.0", "5.0.1", "5.0.2", "5.0.3", "5.0.4", "5.0.5", "5.0.6", "5.0.7", "5.0.8", "5.0.9", "5.1.0", "5.1.1", "5.2.0", "5.2.1", "5.2.2", "5.2.3", "6.0.0", "6.0.1", "6.0.2", "6.0.3", "6.0.4", "6.1.0", "6.1.1", "6.1.2", "6.2.0", "6.3.0", "6.3.1", "6.3.2", "6.3.3", "6.3.4", "6.3.5", "6.3.6", "6.3.7", "6.3.8", "6.3.9", "6.3.10", "6.3.11", "6.3.12", "6.3.13"]
Secure versions:
[6.3.16, 6.3.17, 6.3.18, 6.3.19, 6.3.20, 6.4.0, 6.4.1, 6.4.2, 6.4.3, 6.4.4]
Recommendation:
Update to version 6.4.4.
Open redirect in karma
Published date: 2022-02-26T00:00:38Z
CVE: CVE-2021-23495
Links:
Karma before 6.3.16 is vulnerable to Open Redirect due to missing validation of the return_url query parameter.
Affected versions:
["0.8.0", "0.9.0-dart", "0.8.1", "0.8.2", "0.8.3", "0.9.0", "0.8.4", "0.9.1", "0.8.5", "0.9.2", "0.9.2-dart", "0.9.3", "0.8.6", "0.9.4", "0.8.7", "0.9.5", "0.9.6", "0.8.8", "0.9.7", "0.9.8", "0.10.0", "0.10.1", "0.10.2", "0.11.0", "0.11.1", "0.10.3", "0.10.4", "0.11.2", "0.11.3", "0.10.5", "0.11.4", "0.11.5", "0.10.6", "0.11.6", "0.10.7", "0.11.7", "0.11.8", "0.11.9", "0.10.8", "0.11.10", "0.11.11", "0.11.12", "0.10.9", "0.11.12-dev2", "0.11.13", "0.11.14", "0.12.0", "0.10.10", "0.12.1", "0.12.2", "0.12.3", "0.12.4", "0.12.5", "0.12.6", "0.12.6-beta-43e6e28", "0.12.7", "0.12.8", "0.12.9", "0.12.10", "0.12.11", "0.12.12", "0.12.11-beta-3029418", "0.12.13", "0.12.14", "0.12.15", "0.12.16", "0.12.16-beta-905422d", "0.12.17", "0.12.18", "0.12.19", "0.12.20", "0.12.21", "0.12.22", "0.12.23", "0.12.24", "0.12.24-beta-6cf7955", "0.12.25", "0.12.25-beta-37a7958", "0.12.25-beta-ad5bc24", "0.12.26", "0.12.27", "0.12.28", "0.12.28-beta-b9be580", "0.12.29", "0.12.30", "0.12.31", "0.12.28-beta-f65c864", "0.12.24-dev-test", "0.12.24-dev-socketio10", "0.12.24-dev-socketio10-2", "0.12.32-beta.0", "0.12.32", "0.13.0-rc.0", "0.12.33", "0.13.0-rc.1", "0.12.34", "0.13.0-rc.2", "0.12.35", "0.13.0-rc.3", "0.12.36", "0.13.0-rc.4", "0.12.37", "0.13.0-rc.5", "0.13.0-rc.6", "0.13.0-rc.7", "0.13.0-rc.8", "0.13.0-rc.9", "0.13.0", "0.13.1", "0.13.2", "0.13.3", "0.13.4", "0.13.5", "0.13.6", "0.13.7", "0.13.8", "0.13.9", "0.13.10", "0.13.11", "0.13.12", "0.13.13", "0.13.14", "0.13.15", "0.13.16", "0.13.17", "0.13.18", "0.13.19", "0.13.20", "0.13.21", "0.13.22", "1.0.0", "1.1.0", "1.1.1", "1.1.2", "1.2.0", "1.3.0", "1.4.0", "1.4.1", "1.5.0", "1.6.0", "1.7.0", "1.7.1", "2.0.0", "2.0.2", "2.0.3", "2.0.4", "2.0.5", "3.0.0", "3.1.0", "3.1.1", "3.1.2", "3.1.3", "3.1.4", "4.0.0", "4.0.1", "4.1.0", "4.2.0", "4.3.0", "4.4.0", "4.4.1", "5.0.0", "5.0.1", "5.0.2", "5.0.3", "5.0.4", "5.0.5", "5.0.6", "5.0.7", "5.0.8", "5.0.9", "5.1.0", "5.1.1", "5.2.0", "5.2.1", "5.2.2", "5.2.3", "6.0.0", "6.0.1", "6.0.2", "6.0.3", "6.0.4", "6.1.0", "6.1.1", "6.1.2", "6.2.0", "6.3.0", "6.3.1", "6.3.2", "6.3.3", "6.3.4", "6.3.5", "6.3.6", "6.3.7", "6.3.8", "6.3.9", "6.3.10", "6.3.11", "6.3.12", "6.3.13", "6.3.14", "6.3.15"]
Secure versions:
[6.3.16, 6.3.17, 6.3.18, 6.3.19, 6.3.20, 6.4.0, 6.4.1, 6.4.2, 6.4.3, 6.4.4]
Recommendation:
Update to version 6.4.4.
211 Other Versions
| Version | License | Security | Released | |
|---|---|---|---|---|
| 6.4.4 | MIT | 2024-07-29 - 17:42 | 4 months | |
| 6.4.3 | MIT | 2024-02-24 - 22:29 | 9 months | |
| 6.4.2 | MIT | 2023-04-21 - 23:45 | over 1 year | |
| 6.4.1 | MIT | 2022-09-19 - 19:43 | about 2 years | |
| 6.4.0 | MIT | 2022-06-14 - 00:41 | over 2 years | |
| 6.3.20 | MIT | 2022-05-13 - 00:27 | over 2 years | |
| 6.3.19 | MIT | 2022-04-19 - 19:39 | over 2 years | |
| 6.3.18 | MIT | 2022-04-13 - 03:02 | over 2 years | |
| 6.3.17 | MIT | 2022-02-28 - 20:59 | over 2 years | |
| 6.3.16 | MIT | 2022-02-10 - 18:33 | almost 3 years | |
| 6.3.15 | MIT | 1 | 2022-02-05 - 00:54 | almost 3 years |
| 6.3.14 | MIT | 1 | 2022-02-05 - 00:17 | almost 3 years |
| 6.3.13 | MIT | 2 | 2022-01-31 - 23:05 | almost 3 years |
| 6.3.12 | MIT | 2 | 2022-01-24 - 17:08 | almost 3 years |
| 6.3.11 | MIT | 2 | 2022-01-13 - 06:27 | almost 3 years |
| 6.3.10 | MIT | 2 | 2022-01-08 - 07:16 | almost 3 years |
| 6.3.9 | MIT | 2 | 2021-11-16 - 21:40 | almost 3 years |
| 6.3.8 | MIT | 2 | 2021-11-07 - 13:43 | about 3 years |
| 6.3.7 | MIT | 2 | 2021-11-01 - 20:58 | about 3 years |
| 6.3.6 | MIT | 2 | 2021-10-25 - 19:31 | about 3 years |
| 6.3.5 | MIT | 2 | 2021-10-20 - 17:05 | about 3 years |
| 6.3.4 | MIT | 2 | 2021-06-14 - 04:18 | over 3 years |
| 6.3.3 | MIT | 2 | 2021-06-01 - 18:46 | over 3 years |
| 6.3.2 | MIT | 2 | 2021-03-29 - 23:26 | over 3 years |
| 6.3.1 | MIT | 2 | 2021-03-24 - 21:15 | over 3 years |
| 6.3.0 | MIT | 2 | 2021-03-23 - 20:33 | over 3 years |
| 6.2.0 | MIT | 2 | 2021-03-10 - 23:35 | over 3 years |
| 6.1.2 | MIT | 2 | 2021-03-09 - 00:16 | over 3 years |
| 6.1.1 | MIT | 2 | 2021-02-12 - 18:28 | almost 4 years |
| 6.1.0 | MIT | 2 | 2021-02-03 - 01:29 | almost 4 years |
| 6.0.4 | MIT | 2 | 2021-02-01 - 22:05 | almost 4 years |
| 6.0.3 | MIT | 2 | 2021-01-27 - 22:21 | almost 4 years |
| 6.0.2 | MIT | 2 | 2021-01-25 - 21:58 | almost 4 years |
| 6.0.1 | MIT | 2 | 2021-01-20 - 18:52 | almost 4 years |
| 6.0.0 | MIT | 2 | 2021-01-13 - 17:46 | almost 4 years |
| 5.2.3 | MIT | 2 | 2020-09-25 - 15:45 | about 4 years |
| 5.2.2 | MIT | 2 | 2020-09-08 - 16:16 | about 4 years |
| 5.2.1 | MIT | 2 | 2020-09-02 - 16:44 | about 4 years |
| 5.2.0 | MIT | 2 | 2020-08-31 - 17:46 | about 4 years |
| 5.1.1 | MIT | 2 | 2020-07-28 - 18:18 | over 4 years |
| 5.1.0 | MIT | 2 | 2020-06-11 - 23:14 | over 4 years |
| 5.0.9 | MIT | 2 | 2020-05-19 - 21:06 | over 4 years |
| 5.0.8 | MIT | 2 | 2020-05-18 - 15:09 | over 4 years |
| 5.0.7 | MIT | 2 | 2020-05-16 - 17:48 | over 4 years |
| 5.0.6 | MIT | 2 | 2020-05-16 - 16:56 | over 4 years |
| 5.0.5 | MIT | 2 | 2020-05-07 - 18:06 | over 4 years |
| 5.0.4 | MIT | 2 | 2020-04-30 - 16:10 | over 4 years |
| 5.0.3 | MIT | 2 | 2020-04-29 - 20:26 | over 4 years |
| 5.0.2 | MIT | 2 | 2020-04-16 - 16:16 | over 4 years |
| 5.0.1 | MIT | 2 | 2020-04-10 - 00:08 | over 4 years |
| 5.0.0 | MIT | 2 | 2020-04-09 - 17:53 | over 4 years |
| 4.4.1 | MIT | 2 | 2019-10-18 - 20:16 | about 5 years |
| 4.4.0 | MIT | 2 | 2019-10-17 - 00:50 | about 5 years |
| 4.3.0 | MIT | 2 | 2019-08-27 - 15:44 | about 5 years |
| 4.2.0 | MIT | 2 | 2019-07-12 - 23:36 | over 5 years |
| 4.1.0 | MIT | 2 | 2019-04-15 - 22:20 | over 5 years |
| 4.0.1 | MIT | 2 | 2019-02-28 - 16:00 | over 5 years |
| 4.0.0 | MIT | 2 | 2019-01-23 - 18:19 | almost 6 years |
| 3.1.4 | MIT | 2 | 2018-12-17 - 21:52 | almost 6 years |
| 3.1.3 | MIT | 2 | 2018-12-01 - 19:06 | almost 6 years |
| 3.1.2 | MIT | 2 | 2018-12-01 - 17:23 | almost 6 years |
| 3.1.1 | MIT | 2 | 2018-10-23 - 17:00 | about 6 years |
| 3.1.0 | MIT | 2 | 2018-10-22 - 17:07 | about 6 years |
| 3.0.0 | MIT | 2 | 2018-08-09 - 20:21 | over 6 years |
| 2.0.5 | MIT | 2 | 2018-07-24 - 17:40 | over 6 years |
| 2.0.4 | MIT | 2 | 2018-06-21 - 17:02 | over 6 years |
| 2.0.3 | MIT | 2 | 2018-06-15 - 19:31 | over 6 years |
| 2.0.2 | MIT | 2 | 2018-04-19 - 22:41 | over 6 years |
| 2.0.0 | MIT | 2 | 2017-12-21 - 16:31 | almost 7 years |
| 1.7.1 | MIT | 2 | 2017-08-30 - 10:39 | about 7 years |
| 1.7.0 | MIT | 2 | 2017-05-06 - 09:16 | over 7 years |
| 1.6.0 | MIT | 2 | 2017-04-05 - 15:26 | over 7 years |
| 1.5.0 | MIT | 2 | 2017-02-20 - 12:47 | over 7 years |
| 1.4.1 | MIT | 2 | 2017-01-29 - 21:11 | almost 8 years |
| 1.4.0 | MIT | 2 | 2017-01-14 - 19:47 | almost 8 years |
| 1.3.0 | MIT | 2 | 2016-09-09 - 18:31 | about 8 years |
| 1.2.0 | MIT | 2 | 2016-08-11 - 18:44 | over 8 years |
| 1.1.2 | MIT | 2 | 2016-07-26 - 07:13 | over 8 years |
| 1.1.1 | MIT | 2 | 2016-07-07 - 15:31 | over 8 years |
| 1.1.0 | MIT | 2 | 2016-06-26 - 18:14 | over 8 years |
| 1.0.0 | MIT | 2 | 2016-06-23 - 18:40 | over 8 years |
| 0.13.22 | MIT | 2 | 2016-03-08 - 21:52 | over 8 years |
| 0.13.21 | MIT | 2 | 2016-02-12 - 22:29 | almost 9 years |
| 0.13.20 | MIT | 2 | 2016-02-12 - 15:14 | almost 9 years |
| 0.13.19 | MIT | 2 | 2016-01-06 - 00:54 | almost 9 years |
| 0.13.18 | MIT | 2 | 2016-01-05 - 00:13 | almost 9 years |
| 0.13.17 | MIT | 2 | 2016-01-04 - 15:32 | almost 9 years |
| 0.13.16 | MIT | 2 | 2015-12-24 - 20:47 | almost 9 years |
| 0.13.15 | MIT | 2 | 2015-11-03 - 09:25 | about 9 years |
| 0.13.14 | MIT | 2 | 2015-10-22 - 18:52 | about 9 years |
| 0.13.13 | MIT | 2 | 2015-10-22 - 16:29 | about 9 years |
| 0.13.12 | MIT | 2 | 2015-10-22 - 12:38 | about 9 years |
| 0.13.11 | MIT | 2 | 2015-10-14 - 17:14 | about 9 years |
| 0.13.10 | MIT | 2 | 2015-09-21 - 08:35 | about 9 years |
| 0.13.9 | MIT | 2 | 2015-08-11 - 17:53 | over 9 years |
| 0.13.8 | MIT | 2 | 2015-08-06 - 18:12 | over 9 years |
| 0.13.7 | MIT | 2 | 2015-08-05 - 16:04 | over 9 years |
| 0.13.6 | MIT | 2 | 2015-08-05 - 07:54 | over 9 years |
| 0.13.5 | MIT | 2 | 2015-08-04 - 21:50 | over 9 years |
| 0.13.4 | MIT | 2 | 2015-08-04 - 11:29 | over 9 years |