Description
Cross-site Scripting (XSS) - DOM in NPM karma prior to 6.3.14.
Remediation
References
https://github.com/karma-runner/karma/commit/839578c45a8ac42fbc1d72105f97eab77dd3eb8a
https://huntr.dev/bounties/64b67ea1-5487-4382-a5f6-e8a95f798885
Related Vulnerabilities
CVE-2023-30543 Vulnerability in npm package @web3-react/coinbase-wallet
CVE-2023-32731 Vulnerability in maven package io.grpc:grpc-protobuf
CVE-2016-0779 Vulnerability in maven package org.apache.tomee:openejb-client
CVE-2022-41252 Vulnerability in maven package org.jenkins-ci.plugins:cons3rt
CVE-2020-28500 Vulnerability in maven package org.webjars.bower:lodash