p PatchFirst

CVE-2025-57283

CVE-2025-57283

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js.

CVSS 7.8 · High · EPSS 0.8% · Fix available

Published
Updated

Stack: node

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • browserstack-local npm

    Affected ranges
    • SEMVER: < 1.5.9

    Update to 1.5.9

Original sources

Check your server →