Command Injection

Overview browserstack-cypress-cli is a BrowserStack Cypress CLI for Cypress integration with BrowserStack's remote devices. Affected versions of this package are vulnerable to Command Injection via the loadJsFile process in readCypressConfigUtil. An attacker can execute arbitrary commands by...