HIGH8.8npm
GHSA-6vr3-7wcx-v5g5· CVE-2026-49143browserstack-runner vulnerable to Remote Code Execution via vm sandbox escape in _log HTTP handler
Modified: 6/3/2026
package
pkg:npm/browserstack-runner
browserstack-runner vulnerable to Remote Code Execution via vm sandbox escape in _log HTTP handler
Modified: 6/3/2026
browserstack-runner has an unauthenticated arbitrary file read via path traversal in HTTP server
Modified: 6/3/2026