Description
Improper verification of cryptographic signature in Github: Playwright allows an unauthorized attacker to perform spoofing over an adjacent network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | microsoft/playwright | 1.0.0 – < 1.55.1 | 1.55.1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | playwright | < 1.55.1 | 1.55.1 | GHSA-7mvr-c777-76hp |
Advisories 1
- MSRC-CVE-2025-59288 Playwright Spoofing Vulnerability Microsoft Security Response Center · Oct 14, 2025
References
- Playwright Spoofing Vulnerability vendor-advisory patch