CVE-2025-57283
Fixed upstream EPSS <1%CVSS 7.8
The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js.
Products: Red Hat Fuse 7
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| npm | browserstack-local | 1.5.9 |