The Node.js package browserstack-local 1.5.8 contains a command injection vulnerability. This occurs because the logfile variable is not properly sanitized in lib/Local.js.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> RED HAT SEVERITY ASSESSMENT
THREAT SEVERITY
Important
> GITHUB SECURITY ADVISORY
GHSA-g4w6-c99w-4wh7
MODERATE
BrowserStack Local vulnerable to Command Injection through logfile variable