742 matches found
Astra Linux – Vulnerability in Firefox
The Remote Agent, used in WebDriver, did not validate the Host or Origin headers. This could have allowed websites to connect back locally to the user’s browser to control it. This bug only affected Firefox when WebDriver was enabled, which is not the default configuration.. This vulnerability...
Selenium Grid/Selenoid Unauthenticated RCE
Selenium Grid and Selenoid expose a WebDriver API that allows creating browser sessions with arbitrary capabilities. When deployed without authentication the default for both, an attacker can achieve remote code execution through two browser-specific techniques: For Chrome, the goog:chromeOptions...
@activepieces/piece-google-gemini (=0.1.6), @activepieces/piece-google-vertexai (=0.1.2) +9 more potentially affected by CVE-2026-33750 via brace-expansion (>=2.0.0 <=2.0.2)
brace-expansion NPM version =2.0.0, =0.2.1, =1.16.0, =1.0.1, =0.0.20, =15.0.0 - fluid-webdriver =1.1.2 - nx-cargo =1.0.0-alpha.2 Source cves: CVE-2026-33750 Source advisory: SNYK:JS-BRACEEXPANSION-15789759...
@activepieces/piece-google-gemini (=0.1.6), @activepieces/piece-google-vertexai (=0.1.2) +9 more potentially affected by CVE-2026-33750 via brace-expansion (>=2.0.0 <=2.0.2)
brace-expansion NPM version =2.0.0, =0.2.1, =1.16.0, =1.0.1, =0.0.20, =15.0.0 - fluid-webdriver =1.1.2 - nx-cargo =1.0.0-alpha.2 Source cves: CVE-2026-33750 Source advisory: OSV:GHSA-F886-M6HF-6M8V...
Astra Linux - уязвимость в zabbix
The webdriver for the Browser object expects an error object to be initialized when the webdriversessionquery function fails. But this function can fail for various reasons without an error description and then the wd-error will be NULL and trying to read from it will result in a crash...
EUVD-2025-179423
Malicious code in cz-conventional-changelog-webdriver-mocha-lepton-abiogenesis npm...
EUVD-2025-175614
Malicious code in webdriver-manager-neptune-vulcan-scorpius npm...
EUVD-2025-178844
Malicious code in fornax-transport-webdriver-manager-carpo npm...
EUVD-2025-175619
Malicious code in webdriver-manager-aether-less-loader-mensa npm...
EUVD-2025-175603
Malicious code in webdriver-mocha-isostasy-arcturus-eslint-config npm...
EUVD-2025-176105
Malicious code in supernova-webdriver-mocha-centauri-vega npm...
EUVD-2025-175612
Malicious code in webdriver-manager-parcel-innercore-redgiant npm...
EUVD-2025-175601
Malicious code in webdriver-mocha-scripts-hadron-augmentedreality npm...
EUVD-2025-175605
Malicious code in webdriver-mocha-electron-cache-dione npm...
EUVD-2025-177752
Malicious code in morgan-spectron-webdriver-primatology-aldebaran npm...
EUVD-2025-179477
Malicious code in cryptography-webdriver-manager-schema-test npm...
EUVD-2025-175607
Malicious code in webdriver-mocha-browserify-polaris-cache npm...
EUVD-2025-179271
Malicious code in dorado-spectron-webdriver-spectron-cache npm...
Malicious code in neptune-webdriver-manager-vuetify-boson (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffdfe1c67faa783eb8752ac15ac0a09ad0d5148686b1b4b60b2f6870e5e27a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...