browserstack-runner vulnerabilities (npm)

2 vulnerabilities.

• browserstack-runner npm BrowserStack Runner 0.9.5 Path Traversal via _default HTTP Handler CVE-2026-49144 7.1 HighJune 2, 2026
• browserstack-runner npm BrowserStack Runner 0.9.5 Unauthenticated RCE via /_log HTTP Handler CVE-2026-49143 8.7 HighJune 2, 2026