Security Bulletin: IBM Event Streams is affected by a vulnerability in Node.js ChromeDriver module (CVE-2023-26156)

Summary This security vulnerability affects a required node.js module within IBM Event Streams UI component. Vulnerability Details CVEID: CVE-2023-26156 DESCRIPTION: Node.js ChromeDriver module could allow a remote attacker to execute arbitrary commands on the system, caused by a command injectio...

@faltest/remote (12.0.6) potentially affected by CVE-2023-26156 via chromedriver (119.0.0)

chromedriver NPM version 119.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on chromedriver and may be impacted: - @faltest/remote 12.0.6 Source cves: CVE-2023-26156 Source advisory: OSV:GHSA-HM92-VGMW-QFMX...

CVE-2023-26156

Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have access to the system...

@faltest/remote (12.0.6) potentially affected by CVE-2023-26156 via chromedriver (119.0.0)

chromedriver NPM version 119.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on chromedriver and may be impacted: - @faltest/remote 12.0.6 Source cves: CVE-2023-26156 Source advisory: SNYK:JS-CHROMEDRIVER-6049539...