{"action":"Upgrade chromedriver to 119.0.1 or later.","affected":[{"fixed":"119.0.1","introduced":"0"}],"component":"chromedriver","cve_ids":["CVE-2023-26156"],"ecosystem":"npm","epss":0.02233,"exploited":false,"fixed_versions":["119.0.1"],"ghsa_id":"GHSA-hm92-vgmw-qfmx","id":"tcs_01M5KFVHBZR162CBYYJW1EBFPG","modified_at":"2023-11-17T22:12:01Z","published_at":"2023-11-09T06:30:28Z","references":["https://osv.dev/vulnerability/GHSA-hm92-vgmw-qfmx","https://nvd.nist.gov/vuln/detail/CVE-2023-26156","https://github.com/giggio/node-chromedriver/commit/de961e34e023afcf4fa5c0faeeec69aaa6c3c815","https://gist.github.com/mcoimbra/47b1da554a80795c45126d51e41b2b18","https://github.com/giggio/node-chromedriver","https://security.snyk.io/vuln/SNYK-JS-CHROMEDRIVER-6049539"],"severity":{"label":"medium","score":5.6},"sources":[{"source":"osv","source_id":"GHSA-hm92-vgmw-qfmx","url":"https://osv.dev/vulnerability/GHSA-hm92-vgmw-qfmx"}],"summary":"chromedriver Command Injection vulnerability"}