Browserstack-local (Browserstack) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 30 known versions, newest CVE from 2026-06-02. Vendor: Browserstack.

CVEs of Browserstack-local

• CVE-2026-49143 - CVSS 8.8 (high), 2026-06-02: BrowserStack Runner through 0.9.5 contains a remote code execution vulnerability in the /_log HTTP handler that allows unauthenticated network-adjacent…
• CVE-2026-49144 - CVSS 7.1 (high), 2026-06-02: BrowserStack Runner through 0.9.5 contains a path traversal vulnerability in the _default HTTP handler in lib/server.js that allows unauthenticated…
• CVE-2025-57283 - CVSS 7.8 (high), 2026-01-28: The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in…