org.biouno:uno-choice (>=2.0, <=2.1), org.jenkins-ci.plugins.workflow:workflow-cps (2.39) +2 more potentially affected by CVE-2026-42519 via org.jenkins-ci.plugins:script-security (1.31)

org.jenkins-ci.plugins:script-security MAVEN version 1.31 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.biouno:uno-choice =2.0, =1.1.2, =1.14, =1.16 Source cves: CVE-2026-42519 Source...

Malicious code in browserstack-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a2272bbaadf2917d37e4659f060875d56de205e1b5f21ad56605c07eadfa33e The package browserstack-utils was found to contain malicious code...

MAL-2026-2730 Malicious code in browserstack-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a2272bbaadf2917d37e4659f060875d56de205e1b5f21ad56605c07eadfa33e The package browserstack-utils was found to contain malicious code...

MAL-2026-2243 Malicious code in browserstack-electron-forge-include-package-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23283b4b946444b885ae39acf12ae0ca55ddd864863df70b0fcf84f5c5c57b3 The package browserstack-electron-forge-include-package-plugin was found to contain malicious code. Source: ossf-package-analysis...

browserstack-local Node.js Command Execution

The vulnerability of the logfile parameter in the lib/Local.js library of the npm package browserstack-local for the Node.js software platform is related to improper code generation management. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

org.jenkins-ci.main:jenkins-war (1.653), org.jenkins-ci.main:test (1.653) +9 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.653)

org.jenkins-ci.main:jenkins-core MAVEN version 1.653 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.653 - org.jenkins-ci.main:test 1.653 -...

CVE-2025-57283

A flaw was found in browserstack-local. Improper input sanitization of the logfile variable allows an attacker to inject arbitrary OS commands that are executed when this variable is processed, resulting in arbitrary command execution. Mitigation To mitigate this issue, implement strict input...

@1studio/ui (>=2.17.0, <=2.83.0), @elliemae/pui-e2e-test-sdk (>=0.1.0, <=7.3.4) +8 more potentially affected by CVE-2025-57283 via browserstack-local (>=1.3.0, <=1.5.4)

browserstack-local NPM version =1.3.0, =2.17.0, =0.1.0, =1.0.0, =5.0.0-beta.13, =1.13.0, =0.1.0, =3.0.2, =1.0.28-beta.9, =0.1.0, =1.0.576, =1.0.585 Source cves: CVE-2025-57283 Source advisory: OSV:GHSA-G4W6-C99W-4WH7...

GHSA-G4W6-C99W-4WH7 BrowserStack Local vulnerable to Command Injection through logfile variable

The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js...

BrowserStack Local vulnerable to Command Injection through logfile variable

The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js...

@1studio/ui (>=2.17.0, <=2.83.0), @elliemae/pui-e2e-test-sdk (>=0.1.0, <=7.3.4) +8 more potentially affected by CVE-2025-57283 via browserstack-local (>=1.3.0, <=1.5.4)

browserstack-local NPM version =1.3.0, =2.17.0, =0.1.0, =1.0.0, =5.0.0-beta.13, =1.13.0, =0.1.0, =3.0.2, =1.0.28-beta.9, =0.1.0, =1.0.576, =1.0.585 Source cves: CVE-2025-57283 Source advisory: GHSA-G4W6-C99W-4WH7...

CVE-2025-57283

The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js...

CVE-2025-57283

The Node.js package browserstack-local version 1.5.8 is vulnerable to a command injection vulnerability. The root cause is the improper sanitization of the logfile variable within the lib/Local.js library. An attacker could exploit this to execute arbitrary commands on the host system. Remediatio...

@1studio/ui (>=2.17.0, <=2.83.0), @elliemae/pui-e2e-test-sdk (>=0.1.0, <=7.3.4) +8 more potentially affected by CVE-2025-57283 via browserstack-local (>=1.3.0, <=1.5.4)

browserstack-local NPM version =1.3.0, =2.17.0, =0.1.0, =1.0.0, =5.0.0-beta.13, =1.13.0, =0.1.0, =3.0.2, =1.0.28-beta.9, =0.1.0, =1.0.576, =1.0.585 Source cves: CVE-2025-57283 Source advisory: MEND:CVE-2025-57283...

PT-2026-5132

Name of the Vulnerable Software and Affected Versions browserstack-local version 1.5.8 Description The Node.js package browserstack-local is affected by a command injection issue. The problem stems from insufficient sanitization of the logfile variable within the lib/Local.js file, potentially...

PT-2026-6418

The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js...

EUVD-2025-206491

The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js...

CVE-2025-57283: Improper Control of Generation of Code

The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js...

browserstack-cypress-cli (>=1.14.1, <=1.36.3) potentially affected by CVE-2025-57283 via browserstack-local (>=1.5.1, <=1.5.4)

browserstack-local NPM version =1.5.1, =1.14.1, =1.36.3 Source cves: CVE-2025-57283 Source advisory: SNYK:JS-BROWSERSTACKLOCAL-15149317...

CVE-2025-57283

The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js...