Search for packages
| purl | pkg:maven/org.seleniumhq.selenium/selenium-server@4.0.0-alpha-2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-gtr1-9rvx-4fb1
Aliases: CVE-2022-28108 GHSA-h2rr-m97p-6jq9 PYSEC-2022-43167 |
Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-02T04:42:04.014315+00:00 | GitLab Importer | Affected by | VCID-gtr1-9rvx-4fb1 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.seleniumhq.selenium/selenium-server/CVE-2022-28108.yml | 38.6.0 |