VYPR

npm package

selenium-chromedriver

pkg:npm/selenium-chromedriver

Vulnerabilities (1)

  • CVE-2016-10624HigJun 1, 2018
    affected <= 0.0.2

    selenium-chromedriver is a simple utility for downloading the Selenium Webdriver for Google Chrome selenium-chromedriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the r