npm/browserstack-local CVE-2025-57283: high 7.8, EPSS 0.80%
BrowserStack Local vulnerable to Command Injection through logfile variable
Action: Upgrade browserstack-local to 1.5.9 or later.
npm i browserstack-local@1.5.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.9 | - |
Fixed versions
| 1.5.9 |
Sources
- osv: GHSA-g4w6-c99w-4wh7
- nvd: CVE-2025-57283
- https://github.com/browserstack/browserstack-local-nodejs/issues/168
- https://gist.github.com/Dremig/b639c61541dd1482007dc7a5cd7fefb1
- https://github.com/browserstack/browserstack-local-nodejs
- https://www.npmjs.com
CVE-2025-57283 · published · modified · JSON