Skip to content
Appium vulnerabilities
Newest
-
appium
Appium: Symlink based Zip Slip in @appium/support ZIP extraction
CVE-2026-103975
Fix available
6.5 Medium
-
appium java-client
Appium java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor
CVE-2026-43910
Fix available
8.2 High
-
appium, appium appium\/base-driver +1 more
Appium: Reflected XSS / arbitrary JS in @appium/base-driver /test/guinea-pig* routes
CVE-2026-58191
Fix available
6.5 Medium
-
appium, appium appium\/storage-plugin +1 more
Appium: Unauthenticated arbitrary file/directory deletion in @appium/storage-plugin
CVE-2026-58192
8.6 High
-
appium appium-mcp
MCP Appium: Unescaped Locator Data XSS in MCP-UI Resource (createLocatorGeneratorUI)
CVE-2026-58500
Fix available
8.2 High
-
@appium support, appium appium\/support +1 more
Zip Slip arbitrary file write in @appium/support ZIP extraction
CVE-2026-30973
Fix available
6.5 Medium
-
appium appium-desktop, appium/appium-desktop +1 more
OS Command Injection in appium/appium-desktop
CVE-2023-2479
EPSS 22.0%
9.8 Critical
-
appium appium-chromedriver, hackerone appium-chromedriver node module +1 more
appium-chromedriver downloads Resources over HTTP
CVE-2016-10557
Fix available
8.1 High