appium-desktop OS Command Injection vulnerability

CRITICAL 9.8CVE-2023-2479 · GHSA-xq6j-x8pq-g3gr · Published 02/05/2023 · updated 17/06/2026

Package	Affected versions	Patched versions
appium-desktop appium	`< 1.22.3-4`	`1.22.3-4`
appium-desktop npm	`≤ 1.14.1`	No fix yet

Description

appium-desktop v1.14.1 and prior is vulnerable to OS Command Injection.

NVD description

OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.