[Snyk] Upgrade selenium-standalone from 6.17.0 to 6.23.0

[snyk-bot]

Snyk has created this PR to upgrade selenium-standalone from 6.17.0 to 6.23.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 10 versions ahead of your current version.
• The recommended version was released 5 months ago, on 2020-12-01.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-LODASH-608086	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-590103	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Command Injection SNYK-JS-LODASH-1040724	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Remote Memory Exposure SNYK-JS-BL-608877	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-AJV-584908	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Improper Input Validation SNYK-JS-URIJS-1078286	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Improper Input Validation SNYK-JS-URIJS-1055003	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-567746	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: selenium-standalone

• 6.23.0 - 2020-12-01
  

  v6.23.0

• 6.22.2 - 2020-11-30
  
  • edgechromium disabled for linux platform
• 6.22.1 - 2020-11-27
  
  • avoid mutating the default config
• 6.22.0 - 2020-11-26
  
  • chrome, edgechromium, and geckodriver support latest as version
  • replaced async package with native promises
  • resolved issues #468 #502 #511 #496
• 6.21.0 - 2020-11-26
  
  • resolved issues #357 #457 #376 #488 #489
  • replaced request with got
  • update diedriver version to 3.150.1
  • updated chromiumedge version to 87.0.637.0
  • updated geckodriver version to 87.0.637.0
  • decreased package size by 60% (8.6Mb)
  • nodejs version in docker updated to 12
  • added eslint + prettier
  • minor bug fixes
• 6.20.2 - 2020-11-25
  
  • fix chromiumedge browser driver download on MacOS
• 6.20.1 - 2020-10-08
  
  • fix chromiumedge privileges (#482)
• 6.20.0 - 2020-09-11
  

  add support for chrome edge driver

• 6.19.0 - 2020-08-31
  

  feat(chrome): update to latest

• 6.18.0 - 2020-07-20
  

  chore: Update binaries versions #463

• 6.17.0 - 2019-11-27

from selenium-standalone GitHub release notes

Commit messages

Package name: selenium-standalone

• f2abe73 6.23.0
• 0e653d3 disable edge startup on linux
• 90a635d full url support (fix drag & drop mozilla/send#520)
• 0ed8ca4 prepare history
• b2d409b add more logging, increase timeout (Drag and Drop to upload does not work on the Dev page mozilla/send#519)
• 7133f7a 6.22.2
• b1283b0 update history
• bd4d9ef disable chromiumedge for linux The "Send another file" link on the error webpage can't be clicked mozilla/send#517
• 374dfae chore(deps): update dependency prettier to v2.2.1 (use async and removed jquery from download.js mozilla/send#514)
• 6c4e31c add nodejs 15 to travis ci
• 9d22f78 update history
• 96fee55 6.22.1
• ceb5d44 avoid mutating default config (use svg for progress mozilla/send#513)
• ee2adc8 6.22.0
• 8431cda Support latest as browser driver version (Saw this? mozilla/send#512)
• 27356a6 6.21.0
• 4c470ea Remove useless packages (Move server API routes to /api/ path? mozilla/send#509)
• 70d96a0 Replace request with got (fixes 478 mozilla/send#508)
• ebc70a0 chore(deps): pin dependencies (Changed cursor to No-Drop Ø Symbol when trying to upload many files/f… mozilla/send#507)
• 287a9a2 Add Eslint + prettier (Improve text of landing page mozilla/send#497)
• df10900 remove doctoc mention
• 16c869d Update docs (404 page mozilla/send#506)
• db9be9a chore(deps): update ubuntu:latest docker digest to 4e4bc99 (Don't run tests+linting on Pontoon commits? mozilla/send#501)
• db81929 remove phantomjs and minor updates (fixed build:css on windows mozilla/send#500)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs