84 matches found
CVE-2026-30973
Appium is an automation framework that provides WebDriver-based automation possibilities for a wide range platforms. Prior to 7.0.6, @appium/support contains a ZIP extraction implementation extractAllTo via ZipExtractor.extract with a path traversal Zip Slip check that is non-functional. The chec...
CVE-2026-30973 Zip Slip arbitrary file write in @appium/support ZIP extraction
Appium is an automation framework that provides WebDriver-based automation possibilities for a wide range platforms. Prior to 7.0.6, @appium/support contains a ZIP extraction implementation extractAllTo via ZipExtractor.extract with a path traversal Zip Slip check that is non-functional. The chec...
appium 路径遍历漏洞
Appium is an open-source cross-platform application automation testing framework developed by Appium. Versions of Appium prior to 7.0.6 contained a path traversal vulnerability. This vulnerability stemmed from ineffective path traversal checks in the ZIP extraction implementation, which could all...
PT-2026-24342
Name of the Vulnerable Software and Affected Versions Appium versions prior to 7.0.6 Description Appium, an automation framework, has an issue in its ZIP extraction implementation within the @appium/support package. The path traversal check Zip Slip in extractAllTo via ZipExtractor.extract is...
CVE-2026-30973
creationtimestamp| type| source ---|---|--- 2026-03-09 18:51:57+00:00| published-proof-of-concept| https://github.com/appium/appium/security/advisories/GHSA-rfx7-4xw3-gh4m...
EUVD-2023-0439
Malicious code in bioql PyPI...
CVE-2023-2479
OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4...
Malicious code in appium-rn-id (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef7cb1de288405a6192295e5c90cd73f988b36e415534e40d460c8add2635066 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-4300 Malicious code in appium-rn-id (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef7cb1de288405a6192295e5c90cd73f988b36e415534e40d460c8add2635066 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-21129
Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function. Note: In order to exploit this vulnerability appium-running 0.1.3 has to be installed as one of nemo-appium dependencies...
Malicious code in appium-lib (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6637 Malicious code in appium-lib (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6636 Malicious code in appium-doc_lint (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in appium-doc_lint (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
appium-desktop OS Command Injection vulnerability
appium-desktop v1.14.1 and prior is vulnerable to OS Command Injection...
GHSA-XQ6J-X8PQ-G3GR appium-desktop OS Command Injection vulnerability
appium-desktop v1.14.1 and prior is vulnerable to OS Command Injection...
CVE-2023-2479
OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4...
Command injection
OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4...
