Skip to content
This repository was archived by the owner on Jan 7, 2026. It is now read-only.

docker-selenium: add pending-upstream-fix advisory for GHSA-prj3-ccx8-p6x4 #22832

Merged
powersj merged 1 commit into from
Aug 15, 2025
Merged

docker-selenium: add pending-upstream-fix advisory for GHSA-prj3-ccx8-p6x4 #22832

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions docker-selenium.advisories.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -89,3 +89,11 @@ advisories:
componentType: java-archive
componentLocation: /external_jars/https/repo1.maven.org/maven2/io/netty/netty-codec-http2/4.1.110.Final/netty-codec-http2-4.1.110.Final.jar
scanner: grype
- timestamp: 2025-08-15T01:25:00Z
type: pending-upstream-fix
data:
note: |
The netty-codec-http2 vulnerability comes from the selenium-server dependency. Docker-selenium
is a collection of Docker images and scripts that packages selenium-server, not a Maven/Bazel
project itself. The fix needs to be applied in the selenium package first, which will then
flow through to docker-selenium when it's updated to use the fixed selenium-server version.
Loading