Search for packages
| purl | pkg:npm/windows-selenium-chromedriver@0.1.0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.6 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GMS-2017-12
|
Downloads Resources over HTTP windows-selenium-chromedriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be … | There are no reported fixed by versions. |
|
CVE-2016-10687
|
Cryptographic Issues windows-selenium-chromedriver downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to … | There are no reported fixed by versions. |
|
GHSA-j9q7-3rhf-4ppv
Aliases: CVE-2016-10687 |
windows-selenium-chromedriver downloads Resources over HTTP Affected versions of `windows-selenium-chromedriver` insecurely download an executable over an unencrypted HTTP connection. In scenarios … | There are no reported fixed by versions. |