7.5
CVSS CVSS_V3
Status
Impact
The netty-codec-http2 vulnerability comes from the selenium-server dependency. Docker-selenium is a collection of Docker images and scripts that packages selenium-server, not a Maven/Bazel project itself. The fix needs to be applied in the selenium package first, which will then flow through to docker-selenium when it's updated to use the fixed selenium-server version.
Status