CVE-2022-0437: Karma Project Karma

Medium severity, CVSS 6.1. EPSS: 15.1% chance of exploitation in the next 30 days.

Cross-site Scripting (XSS) - DOM in NPM karma prior to 6.3.14.

Affected products

• Karma Project Karma: before 6.3.14 (fixed in 6.3.14)

Published 2022-02-05. Last modified 2026-06-17.