{"action":"Upgrade chromedriver to 2.25.2 or later.","affected":[{"fixed":"2.25.2","introduced":"0"}],"component":"chromedriver","cve_ids":["CVE-2016-10579"],"ecosystem":"npm","epss":0.01097,"exploited":false,"fixed_versions":["2.25.2"],"ghsa_id":"GHSA-jh5w-6964-x5cf","id":"tcs_01M5KFY3KEC1NV9D3SAXCVGG5K","modified_at":"2025-07-11T14:30:55Z","published_at":"2019-02-18T23:58:05Z","references":["https://osv.dev/vulnerability/GHSA-jh5w-6964-x5cf","https://nvd.nist.gov/vuln/detail/CVE-2016-10579","https://github.com/giggio/node-chromedriver/issues/78#issuecomment-266314859","https://github.com/giggio/node-chromedriver/commit/71981099216b7c15ec01e50baaacb15fe1b85e56","https://github.com/giggio/node-chromedriver"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-jh5w-6964-x5cf","url":"https://osv.dev/vulnerability/GHSA-jh5w-6964-x5cf"}],"summary":"chromedriver Downloads Resources over HTTP"}