@elliemae/pui-e2e-test-sdk (>=11.0.0, <=12.2.0), froth-webdriverio-framework (>=7.0.119-dev1.0, <=9.0.6-ytlc7.5) potentially affected by CVE-2026-25244 via @wdio/browserstack-service (>=9.12.7, <=9.23.0)

@wdio/browserstack-service NPM version =9.12.7, =11.0.0, =7.0.119-dev1.0, =9.0.6-ytlc7.5 Source cves: CVE-2026-25244 Source advisory: SNYK:JS-WDIOBROWSERSTACKSERVICE-16642116...

@elliemae/pui-e2e-test-sdk (>=11.0.0, <=12.2.0), froth-webdriverio-framework (>=7.0.119-dev1.0, <=9.0.6-ytlc7.5) potentially affected by CVE-2026-25244 via @wdio/browserstack-service (>=9.12.7, <=9.23.0)

@wdio/browserstack-service NPM version =9.12.7, =11.0.0, =7.0.119-dev1.0, =9.0.6-ytlc7.5 Source cves: CVE-2026-25244 Source advisory: OSV:GHSA-5C46-X3QW-Q7J7...

CVE-2026-25244

creationtimestamp| type| source ---|---|--- 2026-05-11 14:43:50+00:00| published-proof-of-concept| https://github.com/webdriverio/webdriverio/security/advisories/GHSA-5c46-x3qw-q7j7 2026-05-19 22:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mmafn7z22w2u 2026-05-20 14:50:44+00:0...