Description
The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | browserstack-local | < 1.5.9 | 1.5.9 | GHSA-g4w6-c99w-4wh7 |