HIGH8.8npm
GHSA-6vr3-7wcx-v5g5· CVE-2026-49143browserstack-runner vulnerable to Remote Code Execution via vm sandbox escape in _log HTTP handler
Modified: 6/3/2026
package
npm/browserstack-runner
pkg:npm/browserstack-runner
MEDIUM6.5npm
GHSA-8rpw-6cqh-2v9h· CVE-2026-49144browserstack-runner has an unauthenticated arbitrary file read via path traversal in HTTP server
Modified: 6/3/2026