GHSA lookup

GHSA-5C46-X3QW-Q7J7

Pruva has a verified reproduction for GHSA-5C46-X3QW-Q7J7: @wdio/browserstack-service: OS command injection via crafted git branch name. The canonical evidence record is REPRO-2026-00143.

REPRO

REPRO-2026-00143

Package

@wdio/browserstack-service · npm

Severity

CRITICAL

Status

published

Open verified reproduction Plain text for agents GitHub advisory