Appium base-driver <=10.6.0 - Reflected Cross-Site Scripting

Appium = 10.7.0 contains a reflected XSS caused by unescaped reflection of throwError query parameter, comments POST field, and User-Agent header in base-driver routes, letting remote attackers execute arbitrary JavaScript, exploit requires crafted HTTP requests. id: CVE-2026-58191 info: name:...

@ache-lol/cli (>=0.1.97, <=0.1.99), @ada-mcp/mcp-server (>=0.1.0, <=0.1.1) +178 more potentially affected by CVE-2026-102422 via shell-quote (>=1.8.4, <=1.10.0)

shell-quote NPM version =1.8.4, =0.1.97, =0.1.0, =0.1.0, =0.0.13, =14.0.13, =10.0.0-rc.2, =3.0.0-beta.0, =1.0.0, =2.0.0-rc.1, =6.0.4, =4.0.0-rc.1, =1.0.0-beta.0, =4.0.0-rc.1, =1.0.0, =1.0.15 and more Source cves: CVE-2026-102422 Source advisory: GHSA-PQG4-J6R4-53MV...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7091r: Allow users to configure device events AD7091R-5 devices are supported by the ad7091r-5 driver, along with the ad7091r-base driver. These drivers declare iio events to notify user space when ADC readings fall...

GHSA-3WGP-X9P5-C7CC Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes

Summary Appium's base-driver mounts the built-in /test/guinea-pig, /test/guinea-pig-scrollable and /test/guinea-pig-app-banner routes unconditionally on every server. The handler reflects the throwError query param, the comments POST field, and the User-Agent request header into the returned HTML...

Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes

Summary Appium's base-driver mounts the built-in /test/guinea-pig, /test/guinea-pig-scrollable and /test/guinea-pig-app-banner routes unconditionally on every server. The handler reflects the throwError query param, the comments POST field, and the User-Agent request header into the returned HTML...

@appium/base-plugin (>=3.2.0, <=3.3.0), @appium/fake-plugin (>=4.2.0, <=4.3.0) +8 more potentially affected by CVE-2026-58191 via @appium/base-driver (>=10.3.0, <=10.6.0)

@appium/base-driver NPM version =10.3.0, =3.2.0, =4.2.0, =3.0.10, =2.107.37, =2.107.37, =3.3.0, =0.1.0-beta.1, =0.79.0, =1.0.96, =1.0.115 Source cves: CVE-2026-58191 Source advisory: GHSA-3WGP-X9P5-C7CC...

@appium/base-plugin (>=3.2.0, <=3.3.0), @appium/fake-plugin (>=4.2.0, <=4.3.0) +8 more potentially affected by CVE-2026-58191 via @appium/base-driver (>=10.3.0, <=10.6.0)

@appium/base-driver NPM version =10.3.0, =3.2.0, =4.2.0, =3.0.10, =2.107.37, =2.107.37, =3.3.0, =0.1.0-beta.1, =0.79.0, =1.0.96, =1.0.115 Source cves: CVE-2026-58191 Source advisory: OSV:GHSA-3WGP-X9P5-C7CC...

Cross-site Scripting (XSS)

Overview @appium/base-driver is a Base driver class for Appium drivers Affected versions of this package are vulnerable to Cross-site Scripting XSS via compileLodashTemplate. An attacker can execute arbitrary JavaScript in the context of the server origin by injecting malicious input into the...

@appium/base-plugin (>=3.2.0, <=3.3.0), @appium/fake-plugin (>=4.2.0, <=4.3.0) +8 more potentially affected by CVE-2026-58191 via @appium/base-driver (>=10.3.0, <=10.6.0)

@appium/base-driver NPM version =10.3.0, =3.2.0, =4.2.0, =3.0.10, =2.107.37, =2.107.37, =3.3.0, =0.1.0-beta.1, =0.79.0, =1.0.96, =1.0.115 Source cves: CVE-2026-58191 Source advisory: SNYK:JS-APPIUMBASEDRIVER-17900619...

@appium/base-plugin (>=2.2.0, <=3.3.0), @appium/fake-driver (>=3.0.0, <=3.2.13) +87 more potentially affected by CVE-2026-58191 via @appium/base-driver (>=8.1.2, <=10.6.0)

@appium/base-driver NPM version =8.1.2, =2.2.0, =3.0.0, =3.0.0, =1.1.9, =0.1.0, =1.0.0-beta.7, =0.1.0, =0.1.0, =0.1.0, =1.7.0, =1.0.8, =2.9.5-snapshot-1744639623358, =0.1.0, =0.21.2-feat.4, =1.1.2, =1.1.4 and more Source cves: CVE-2026-58191 Source advisory: MEND:CVE-2026-58191...

CVE-2026-58191 Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes

Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 10.7.0, Appium's base-driver unconditionally mounts the /test/guinea-pig, /test/guinea-pig-scrollable, and /test/guinea-pig-app-banner routes, and compileLodashTemplate...

CVE-2026-58191 Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes

Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 10.7.0, Appium's base-driver unconditionally mounts the /test/guinea-pig, /test/guinea-pig-scrollable, and /test/guinea-pig-app-banner routes, and compileLodashTemplate...

CVE-2026-58191 Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes

Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 10.7.0, Appium's base-driver unconditionally mounts the /test/guinea-pig, /test/guinea-pig-scrollable, and /test/guinea-pig-app-banner routes, and compileLodashTemplate...

CVE-2026-58191

Appium base-driver before 10.7.0 unconditionally mounts /test/guinea-pig, /test/guinea-pig-scrollable, and /test/guinea-pig-app-banner routes, and compileLodashTemplate reflects throwError, comments field, and User-Agent header into HTML without escaping. This enables reflected XSS and arbitrary ...

CVE-2026-58191: Improper Neutralization of Input During Web Page Generation

Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 10.7.0, Appium's base-driver unconditionally mounts the /test/guinea-pig, /test/guinea-pig-scrollable, and /test/guinea-pig-app-banner routes, and compileLodashTemplate...

CVE-2023-53390

In the Linux kernel, the following vulnerability has been resolved: drivers: base: dd: fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremove...

SUSE CVE-2023-52627

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7091r: Allow users to configure device events AD7091R-5 devices are supported by the ad7091r-5 driver together with the ad7091r-base driver. Those drivers declared iio events for notifying user space when ADC readings...

DEBIAN-CVE-2023-52627

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7091r: Allow users to configure device events AD7091R-5 devices are supported by the ad7091r-5 driver together with the ad7091r-base driver. Those drivers declared iio events for notifying user space when ADC readings...

UBUNTU-CVE-2023-52627

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7091r: Allow users to configure device events AD7091R-5 devices are supported by the ad7091r-5 driver together with the ad7091r-base driver. Those drivers declared iio events for notifying user space when ADC readings...

CVE-2023-52627 iio: adc: ad7091r: Allow users to configure device events

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7091r: Allow users to configure device events AD7091R-5 devices are supported by the ad7091r-5 driver together with the ad7091r-base driver. Those drivers declared iio events for notifying user space when ADC readings...