Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-57283
7.8
HIGHCVSS v3
Published
January 28, 2026
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js.
NPM