Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-6vr3-7wcx-v5g5
  • npm/browserstack-runner
 browserstack-runner vulnerable to Remote Code Execution via vm sandbox escape in _log HTTP handler 03 Jun
  • No fix available
  • Severity - 8.7 (High)
GHSA-8rpw-6cqh-2v9h
  • npm/browserstack-runner
 browserstack-runner has an unauthenticated arbitrary file read via path traversal in HTTP server 03 Jun
  • No fix available
  • Severity - 7.1 (High)
CVE-2026-49144
  • github.com/browserstack/browserstack-runner
 BrowserStack Runner 0.9.5 Path Traversal via _default HTTP Handler 02 Jun
  • Fix available
  • Severity - 7.1 (High)
CVE-2026-49143
  • github.com/browserstack/browserstack-runner
 BrowserStack Runner 0.9.5 Unauthenticated RCE via /_log HTTP Handler 02 Jun
  • Fix available
  • Severity - 8.7 (High)