Repository navigation
[🐛 Bug]: selenium-manager 0.4.51 contains zip package with cirtical cve #18225
Description
Description
Hello,
the selenium-manager binary that is included in the Selenium.WebDriver.4.51.0.nupkg Nuget contains a critical Rust CVE in the zip package. I would like to ask you to rebuild the binary with the patches included and release an updated nuget package.
Details:
GHSA-m665-v7pm-7grj
Reproducible Code
None
Activity
selenium-ci commentedon Oct 22, 2026
@ntimo, thank you for creating this issue. We will troubleshoot it as soon as we can.
Selenium Triage Team: remember to follow the Triage Guide
AutomatedTester commentedon Oct 22, 2026
Thanks for the report, @ntimo. This has been fixed on trunk: Selenium Manager's
zipdependency was updated to 9.0.5 (the patched version for GHSA-m665-v7pm-7grj) in #18202. We're preparing a release that will include a rebuilt Selenium Manager with the fix.Generated by Claude Code
cgoldberg commentedon Oct 22, 2026
closing this because #18202 was merged and is in nightly releases. It will be generally available in
4.52.0