BoniGarcia WebDriverManager Affected By Improper Restriction of XML External Entity Reference

CRITICAL 9.3CVE-2025-4641 · GHSA-pwm3-776c-8q7q · Published 14/05/2025 · updated 17/06/2026

Package	Affected versions	Patched versions
io.github.bonigarcia:webdrivermanager Maven	`≥ 1.0.0, < 6.1.0`	`6.1.0`

Description

Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager on Windows, MacOS, Linux (XML parsing components modules) allows Data Serialization External Entities Blowup. This vulnerability is associated with program files src/main/java/io/github/bonigarcia/wdm/WebDriverManager.java.

This issue affects webdrivermanager: from 1.0.0 before 6.1.0.

NVD description

Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager WebDriverManager on Windows, MacOS, Linux (XML parsing components modules) allows Data Serialization External Entities Blowup. This vulnerability is associated with program files src/main/java/io/github/bonigarcia/wdm/WebDriverManager.java. This issue affects webdrivermanager: from 1.0.0 before 6.0.2.

References

nvd.nist.gov/vuln/detail/CVE-2025-4641 · ADVISORY
bonigarcia/webdrivermanager#1458 · WEB
bonigarcia/webdrivermanager · PACKAGE

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free