https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T06:37:58.786817+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-28108 CVE-2022-28108 2026-09-29T06:37:58.837520+00:00

Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain.

 https://vulnerability.circl.lu/vuln/ghsa-h2rr-m97p-6jq9 GHSA-h2rr-m97p-6jq9 — Selenium Server (Grid) CSRF 2026-09-29T06:37:58.837630+00:00

Affected: Maven: org.seleniumhq.selenium:selenium-grid, Maven: org.seleniumhq.selenium:selenium-server

Selenium Server (Grid) before 4.0.0-alpha-7 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain.

 https://vulnerability.circl.lu/vuln/pysec-2022-43167 PYSEC-2022-43167 2026-09-29T06:37:58.837690+00:00

Affected: PyPI: selenium

Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain.