Advisories for Npm/Karma package

The package karma before 6.3.16 is vulnerable to Open Redirect due to missing validation of the return_url query parameter.

Cross-site Scripting (XSS) - DOM in NPM karma