Skip to content
OpenAdvisories

Package · npm

chromedriver

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.6
    CVE-2023-26156

    chromedriver Command Injection vulnerability

    Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. **Note:** An…

    chromedriver npm
  • High 8.1
    CVE-2016-10579

    chromedriver Downloads Resources over HTTP

    Chromedriver is an NPM wrapper for selenium ChromeDriver. Chromedriver before 2.26.1 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary…

    HackerOne chromedriver node module chromedriver npm