[Apiiro] OSS vulnerability in code module with sensitive APIs · Critical Risk

[haimlebo]

test

Discovered on: Feb 10, 2024 08:19
Dependency: grunt-karma
Version: 0.6.2
Type: Direct
Introduced through:

• grunt-karma: 0.6.2

Vulnerabilities

• Grunt-karma vulnerable to prototype pollution with CVSS score 9.8. fixed version: 4.0.2

About this package:

External dependency: grunt-karma - https://www.npmjs.com/package/grunt-karma
Package details: grunt plugin for karma test runner
Latest version: 4.0.2
License: MIT
Insights:

• Adequate count maintainers - This package is maintained by at least 3 developers
• Adequately tested - Testing practices are thoroughly followed
• Has vulnerabilities - One or more vulnerabilities have been reported for this package
• Dev dependency - Declared as a dev dependency in the manifest file

Remediation

Recommended fix version: 4.0.2
Upgrading will fix all current vulnerabilities.
✅ No known vulnerabilities for the recommended version.

View in Apiiro