@appium/support
npm2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting @appium/supportpage 1 of 1
- CVE-2026-103975MEDIUMCVSS 6.5EG 6.5fixed in 7.2.62026-10-14
Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 7.2.6, @appium/support ZIP extraction accepts an archive entry that creates a symbolic link to a location outside t…
- CVE-2026-30973MEDIUMCVSS 6.5EG 6.5fixed in 7.0.62026-03-10
Appium is an automation framework that provides WebDriver-based automation possibilities for a wide range platforms. Prior to 7.0.6, @appium/support contains a ZIP extraction implementation (extractAllTo() via ZipExtractor.extract()) with …
Check whether @appium/support is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for @appium/support CVEs against the assets you own.
Book a Demo →