Vulnerability Details CVE-2025-57283
The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 48.9%
CVSS Severity
CVSS v3 Score 7.8
References
Products affected by CVE-2025-57283
-
cpe:2.3:a:browserstack:browserstack-local:1.5.8