{"action":"Upgrade selenium-binaries to 0.15.0 or later.","affected":[{"fixed":"0.15.0","introduced":"0"}],"component":"selenium-binaries","cve_ids":["CVE-2016-10589"],"ecosystem":"npm","epss":0.01725,"exploited":false,"fixed_versions":["0.15.0"],"ghsa_id":"GHSA-h4mc-r4f4-hcf4","id":"tcs_01M5KFT5VGAN88E93Y025D517B","modified_at":"2023-11-08T03:58:14.404723Z","published_at":"2019-02-18T23:34:37Z","references":["https://osv.dev/vulnerability/GHSA-h4mc-r4f4-hcf4","https://nvd.nist.gov/vuln/detail/CVE-2016-10589","https://github.com/spunjs/selenium-binaries/pull/33","https://github.com/spunjs/selenium-binaries/commit/be37e82a3c43a4f1679d66cf9467085ec9994c47","https://github.com/spunjs/selenium-binaries","https://www.huntr.dev/bounties/1-npm-selenium-binaries","https://www.npmjs.com/advisories/175"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-h4mc-r4f4-hcf4","url":"https://osv.dev/vulnerability/GHSA-h4mc-r4f4-hcf4"}],"summary":"selenium-binaries downloads resources over HTTP"}