CVE-2026-84128

A privilege escalation vulnerability exists in the WebDriver BiDi component of Firefox and Thunderbird . This issue was addressed in versions 155 of both products. While the exact root cause is not detailed, the vulnerability allows for elevated privileges. Exploitation details are not provided i...

CVE-2026-84128: Improper Access Control

Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...

PT-2026-84181

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 155 Thunderbird versions prior to 155 Description Privilege escalation exists in the WebDriver BiDi component. WebDriver BiDi is a protocol that allows for bidirectional communication between the browser and the...

Malicious Package

Overview chromecast-webdriver-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview chromeos-webdriver-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

firefox-devtools-mcp v0.10.0

Firefox DevTools MCP Model Context Protocol server for automating Firefox via WebDriver BiDi through Selenium WebDriver. Works with Claude Code, Claude Desktop, Cursor, Cline and other MCP clients. Repository: https://github.com/mozilla/firefox-devtools-mcp Note : This MCP server requires a local...

MAL-2026-14232 Malicious code in chromeos-webdriver-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bbf3413f6465a1f8bb628dcdb79f59ac7c197bbfba2024202c9915f95ad8161 The package's postinstall script runs on npm install and issues an HTTPS POST to https://kvpq6u62.instances.poc.jchunt.top/chromeos-webdriver-cli...

Malicious code in chromeos-webdriver-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bbf3413f6465a1f8bb628dcdb79f59ac7c197bbfba2024202c9915f95ad8161 The package's postinstall script runs on npm install and issues an HTTPS POST to https://kvpq6u62.instances.poc.jchunt.top/chromeos-webdriver-cli...

MAL-2026-14231 Malicious code in chromecast-webdriver-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c858cd5357d77c39366f7bd1cc1985a5d7012d33da45d6dc9667544b54198d6 [email protected] runs a postinstall lifecycle script that collects host metadata os.hostname, platform, arch, node version, package nam...

Malicious code in chromecast-webdriver-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c858cd5357d77c39366f7bd1cc1985a5d7012d33da45d6dc9667544b54198d6 [email protected] runs a postinstall lifecycle script that collects host metadata os.hostname, platform, arch, node version, package nam...

com.automationrockstars:bmo-event-processor (>=2.0.1, <=2.0.3), com.automationrockstars:gir (>=2.0.1, <=2.0.3) +18 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.8.0)

com.rabbitmq:amqp-client MAVEN version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.automationrockstars:bmo-event-processor =2.0.1, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =1.0.0, =3.2.0-689,...

Malicious code in tizen-webdriver-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf90f542c0f81ff50f903a216f44a5870bc0ac5ede472fa2c41af447994b58e4 On npm install, the package's postinstall lifecycle script collects host identifiers os.hostname, process.platform, process.arch, Node.js version,...

MAL-2026-13966 Malicious code in tizen-webdriver-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf90f542c0f81ff50f903a216f44a5870bc0ac5ede472fa2c41af447994b58e4 On npm install, the package's postinstall lifecycle script collects host identifiers os.hostname, process.platform, process.arch, Node.js version,...

Malicious Package

Overview tizen-webdriver-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

firefox-devtools-mcp v0.9.15

Firefox DevTools MCP Model Context Protocol server for automating Firefox via WebDriver BiDi through Selenium WebDriver. Works with Claude Code, Claude Desktop, Cursor, Cline and other MCP clients. Repository: https://github.com/mozilla/firefox-devtools-mcp Note : This MCP server requires a local...

Malicious Package

Overview hermes-webdriver-manager-janus-hyperion is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizatio...

gabposter (>=1.2.5, <=1.2.8), open-webdriver (>=1.3.5, <=1.6.9) +4 more potentially affected by CVE-2026-55206 via py7zr (0.20.2)

py7zr PYPI version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - gabposter =1.2.5, =1.3.5, =1.0.4, =1.0.0, =1.0.10, =1.0.0, =1.2.86 Source cves: CVE-2026-55206 Source advisory: OSV:PYSEC-2026-2973...

gabposter (>=1.2.5, <=1.2.8), open-webdriver (>=1.3.5, <=1.6.9) +4 more potentially affected by CVE-2026-23879 via py7zr (0.20.2)

py7zr PYPI version 0.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on py7zr and may be impacted: - gabposter =1.2.5, =1.3.5, =1.0.4, =1.0.0, =1.0.10, =1.0.0, =1.2.86 Source cves: CVE-2026-23879 Source advisory: OSV:PYSEC-2026-2974...

changedetection.io path traversal using file URI scheme without supplying hostname

SummaryThe validation for the file URI scheme falls short, and results in an attacker being able to read any file on the system. This issue only affects instances with a webdriver enabled, and ALLOWFILEURI false or not defined. DetailsThe check used for URL protocol, issafeurl, allows file: as a...

PYSEC-2026-1239 changedetection.io path traversal using file URI scheme without supplying hostname

Summary The validation for the file URI scheme falls short, and results in an attacker being able to read any file on the system. This issue only affects instances with a webdriver enabled, and ALLOWFILEURI false or not defined. Details The check used for URL protocol, issafeurl, allows file: as ...