CVE-2025-57283
The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js.
- Update to 1.5.9
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for browserstack-local in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerability: 1
The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js.
Check your installed stack and versions against the current vulnerability feeds.