search

karma-runner / grunt-karma

Grunt plugin for Karma.
MIT License
468 stars 116 forks source link

[CVE-2022-37602]/ Prototype pollution found in grunt-karma.js #311

Open secdevlpr26 opened 2 years ago

secdevlpr26 commented 2 years ago

Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js.

The prototype pollution vulnerability can be mitigated with several best practices described here: https://learn.snyk.io/lessons/prototype-pollution/javascript/