{"action":"Upgrade playwright to 1.55.1 or later.","affected":[{"fixed":"1.55.1","introduced":"0"}],"component":"playwright","cve_ids":["CVE-2025-59288"],"ecosystem":"npm","epss":0.00234,"exploited":false,"fixed_versions":["1.55.1"],"ghsa_id":"GHSA-7mvr-c777-76hp","id":"tcs_01M5KFAF0FAT73SXH76VHZ233M","modified_at":"2026-09-10T03:50:29.418266842Z","published_at":"2025-10-14T18:30:36Z","references":["https://osv.dev/vulnerability/GHSA-7mvr-c777-76hp","https://github.com/SocketDev/security-research/security/advisories/GHSA-qxm8-4v54-964r","https://nvd.nist.gov/vuln/detail/CVE-2025-59288","https://github.com/microsoft/playwright/pull/37532","https://github.com/microsoft/playwright/commit/72c62d840247d9defd87c6beb0344d456794b570","https://github.com/microsoft/playwright","https://github.com/microsoft/playwright/releases/tag/v1.55.1","https://github.com/microsoft/playwright/releases/tag/v1.56.0","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59288"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-7mvr-c777-76hp","url":"https://osv.dev/vulnerability/GHSA-7mvr-c777-76hp"},{"source":"nvd","source_id":"CVE-2025-59288","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-59288"}],"summary":"Playwright downloads and installs browsers without verifying the authenticity of the SSL certificate"}