CVE-2025-57285
1 advisory.
npm/codeceptjs CVE-2025-57285: critical 9.8
CodeceptJS's incomprehensive sanitation can lead to Command Injection
Action: Upgrade codeceptjs to 3.7.5 or later.
npm i codeceptjs@3.7.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.5.0 | 3.7.5 | - |
Fixed versions
| 3.7.5 |
Sources
- osv: GHSA-34w8-mcwr-vg29
- https://nvd.nist.gov/vuln/detail/CVE-2025-57285
- https://github.com/codeceptjs/CodeceptJS/pull/3604
- https://github.com/codeceptjs/CodeceptJS/pull/5190
- https://gist.github.com/Dremig/1ba111f9b1f7cffe1fcb4838b64e55b9
- https://github.com/codeceptjs/CodeceptJS
- https://www.npmjs.com
CVE-2025-57285 · published · modified · JSON