npm/selenium-binaries CVE-2016-10589: high 8.1, EPSS 1.73%
selenium-binaries downloads resources over HTTP
Action: Upgrade selenium-binaries to 0.15.0 or later.
npm i selenium-binaries@0.15.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.15.0 | - |
Fixed versions
| 0.15.0 |
Sources
- osv: GHSA-h4mc-r4f4-hcf4
- https://nvd.nist.gov/vuln/detail/CVE-2016-10589
- https://github.com/spunjs/selenium-binaries/pull/33
- https://github.com/spunjs/selenium-binaries/commit/be37e82a3c43a4f1679d66cf9467085ec9994c47
- https://github.com/spunjs/selenium-binaries
- https://www.huntr.dev/bounties/1-npm-selenium-binaries
- https://www.npmjs.com/advisories/175
CVE-2016-10589 · published · modified · JSON