BR
Vendor
browserstack
4
CVEs
0
On KEV
0
New 30D
Products
BR8.8
browserstack-runner
browserstack
2 CVEs0 on KEV0 new
BR7.8
browserstack-cypress-cli
browserstack
1 CVEs0 on KEV0 new
BR7.8
Browserstack-local
Browserstack
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-48723 | BR browserstack-cypress-cli browserstack | 7.8 | Jun 15 | BrowserStack Cypress CL: Command Injection via cypress_config_file leads to arbitrary code execution through malicious browserstack.json |
| CVE-2026-49144 | BR browserstack-runner browserstack | 6.5 | Jun 2 | BrowserStack Runner 0.9.5 Path Traversal via _default HTTP Handler |
| CVE-2026-49143 | BR browserstack-runner browserstack | 8.8 | Jun 2 | BrowserStack Runner 0.9.5 Unauthenticated RCE via /_log HTTP Handler |
| CVE-2025-57283 | BR Browserstack-local Browserstack | 7.8 | Jan 28 | The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability |