CVE-2022-37602

Name of the Vulnerable Software and Affected Versions karma-runner grunt-karma version 4.0.1

Description The issue is related to a prototype pollution vulnerability in the karma-runner grunt-karma. It occurs via the key variable in grunt-karma.js.

Recommendations For version 4.0.1, consider restricting access to the grunt-karma.js file or the key variable until a patch is available. As a temporary workaround, avoid using the key variable in the affected grunt-karma.js file to minimize the risk of exploitation.