CVE-2023-26156
1 advisory.
npm/chromedriver CVE-2023-26156: medium 5.6, EPSS 2.23%
chromedriver Command Injection vulnerability
Action: Upgrade chromedriver to 119.0.1 or later.
npm i chromedriver@119.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 119.0.1 | - |
Fixed versions
| 119.0.1 |
Sources
- osv: GHSA-hm92-vgmw-qfmx
- https://nvd.nist.gov/vuln/detail/CVE-2023-26156
- https://github.com/giggio/node-chromedriver/commit/de961e34e023afcf4fa5c0faeeec69aaa6c3c815
- https://gist.github.com/mcoimbra/47b1da554a80795c45126d51e41b2b18
- https://github.com/giggio/node-chromedriver
- https://security.snyk.io/vuln/SNYK-JS-CHROMEDRIVER-6049539
CVE-2023-26156 · published · modified · JSON