← Back

Karma

karma

Vendor: Karma Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-23495
1Karma Project
1Karma
Jun 17, 2026
Feb 25, 2022
N/A· v4
6.1 MEDIUM· v3
5.8 MEDIUM· v2
The package karma before 6.3.16 are vulnerable to Open Redirect due to missing validation of the return_url query parameter.
CVE-2022-0437
1Karma Project
1Karma
Jun 17, 2026
Feb 5, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site Scripting (XSS) - DOM in NPM karma prior to 6.3.14.