CVE-2025-59288
1 advisory.
npm/playwright CVE-2025-59288: high, EPSS 0.23%
Playwright downloads and installs browsers without verifying the authenticity of the SSL certificate
Action: Upgrade playwright to 1.55.1 or later.
npm i playwright@1.55.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.55.1 | - |
Fixed versions
| 1.55.1 |
Sources
- osv: GHSA-7mvr-c777-76hp
- https://github.com/SocketDev/security-research/security/advisories/GHSA-qxm8-4v54-964r
- https://nvd.nist.gov/vuln/detail/CVE-2025-59288
- https://github.com/microsoft/playwright/pull/37532
- https://github.com/microsoft/playwright/commit/72c62d840247d9defd87c6beb0344d456794b570
- https://github.com/microsoft/playwright
- https://github.com/microsoft/playwright/releases/tag/v1.55.1
- https://github.com/microsoft/playwright/releases/tag/v1.56.0
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59288
CVE-2025-59288 · published · modified · JSON