@1771technologies/oneplay (>=0.0.1 <=0.0.6), @99xio/mcp-playwright (=0.1.2) +506 more potentially affected by CVE-2025-9611 via playwright (>=1.0.2 <=1.56.0-beta-1760659234000)

playwright NPM version =1.0.2, =0.0.1, =0.9.31, =0.1.8, =0.0.18-patch.0, =0.0.33, =0.0.1, =0.1.1, =0.1.1, =0.0.4, =0.0.10, =0.0.1, =1.11.0, =1.13.3 - @alauda/doom-export =0.1.1 and more Source cves: CVE-2025-9611 Source advisory: SNYK:JS-PLAYWRIGHT-14888269...

Exposed Dangerous Method or Function

Overview playwright is an A high-level API to automate web browsers Affected versions of this package are vulnerable to Exposed Dangerous Method or Function via missing validation of the Origin header on incoming connections. An attacker can gain unauthorized access to locally running endpoints b...

@1771technologies/oneplay (>=0.0.1 <=0.0.6), @a11ywatch/pagemind (>=0.9.31 <=0.9.34) +512 more potentially affected by CVE-2025-59288 via playwright (>=0.10.0 <=1.55.1-beta-1758616458000)

playwright NPM version =0.10.0, =0.0.1, =0.9.31, =0.1.8, =0.0.18-patch.0, =0.0.33, =0.0.1, =0.1.1, =0.1.1, =0.0.10, =0.0.1, =0.1.466, =0.32.2, =2.15.0, =0.3.0, =0.7.3 and more Source cves: CVE-2025-59288 Source advisory: OSV:GHSA-7MVR-C777-76HP...

CVE-2025-26683 Azure Playwright Elevation of Privilege Vulnerability

...