Astra Linux – Vulnerability in Firefox

The Remote Agent, used in WebDriver, did not validate the Host or Origin headers. This could have allowed websites to connect back locally to the user’s browser to control it. This bug only affected Firefox when WebDriver was enabled, which is not the default configuration.. This vulnerability...

Selenium Grid/Selenoid Unauthenticated RCE

Selenium Grid and Selenoid expose a WebDriver API that allows creating browser sessions with arbitrary capabilities. When deployed without authentication the default for both, an attacker can achieve remote code execution through two browser-specific techniques: For Chrome, the goog:chromeOptions...

@activepieces/piece-google-gemini (=0.1.6), @activepieces/piece-google-vertexai (=0.1.2) +9 more potentially affected by CVE-2026-33750 via brace-expansion (>=2.0.0 <=2.0.2)

brace-expansion NPM version =2.0.0, =0.2.1, =1.16.0, =1.0.1, =0.0.20, =15.0.0 - fluid-webdriver =1.1.2 - nx-cargo =1.0.0-alpha.2 Source cves: CVE-2026-33750 Source advisory: OSV:GHSA-F886-M6HF-6M8V...

@activepieces/piece-google-gemini (=0.1.6), @activepieces/piece-google-vertexai (=0.1.2) +9 more potentially affected by CVE-2026-33750 via brace-expansion (>=2.0.0 <=2.0.2)

brace-expansion NPM version =2.0.0, =0.2.1, =1.16.0, =1.0.1, =0.0.20, =15.0.0 - fluid-webdriver =1.1.2 - nx-cargo =1.0.0-alpha.2 Source cves: CVE-2026-33750 Source advisory: SNYK:JS-BRACEEXPANSION-15789759...

Astra Linux - уязвимость в zabbix

The webdriver for the Browser object expects an error object to be initialized when the webdriversessionquery function fails. But this function can fail for various reasons without an error description and then the wd-error will be NULL and trying to read from it will result in a crash...

EUVD-2025-175614

Malicious code in webdriver-manager-neptune-vulcan-scorpius npm...

EUVD-2025-177326

Malicious code in parcel-farout-webdriver-manager-sails npm...

EUVD-2025-178844

Malicious code in fornax-transport-webdriver-manager-carpo npm...

EUVD-2025-175619

Malicious code in webdriver-manager-aether-less-loader-mensa npm...

EUVD-2025-175603

Malicious code in webdriver-mocha-isostasy-arcturus-eslint-config npm...

EUVD-2025-176105

Malicious code in supernova-webdriver-mocha-centauri-vega npm...

EUVD-2025-175617

Malicious code in webdriver-manager-cosmos-mongoose-got npm...

EUVD-2025-175612

Malicious code in webdriver-manager-parcel-innercore-redgiant npm...

EUVD-2025-179271

Malicious code in dorado-spectron-webdriver-spectron-cache npm...

EUVD-2025-176023

Malicious code in telesto-dotenv-safe-webdriver-mocha-jwt npm...

EUVD-2025-175601

Malicious code in webdriver-mocha-scripts-hadron-augmentedreality npm...

EUVD-2025-175997

Malicious code in terser-webpack-plugin-spectron-webdriver-sirius-enceladus npm...

Malicious code in wavefunction-prompts-webdriver-mocha-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9133d1deb74b2792ed8706555c49fa13ce1ca719f838438eaefd5622916c5386 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175605

Malicious code in webdriver-mocha-electron-cache-dione npm...

EUVD-2025-180039

Malicious code in blackhole-jupiter-spectron-webdriver-meteor npm...