Impact Score: 5/10
Cypress v9.5.3 — Release Notes & Engineering Impact
Source available — automated, not human-reviewed
Component: cypress · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
⚡ Executive Summary (TL;DR)
Cypress v9.5.3. Source highlight: _Released 3/28/2022_
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
🔧 Bug Fixes & Patches (2)
- Fixed an issue in `cy.readFile()` where the command would not retry or provide
- Fix the `Cypress.Buffer` TypeScript type to reference the static constructor
📄 View Raw Release Notes (Original Developer Log)
_Released 3/28/2022_
**Bugfixes:**
- Corrected a logging issue with `cy.intercept()` where the response status code
and response body were sometimes missing from the log details in `open` mode.
Fixed [#18757](https://github.com/cypress-io/cypress/issues/18757).
- Fixed an issue in `cy.readFile()` where the command would not retry or provide
a meaningful error message if `null` encoding was used and the file was not
found. Fixed [#20683](https://github.com/cypress-io/cypress/issues/20683).
- Updated the Cypress Keyboard shortcuts to only run the shortcut when the
pressed shortcut key was not used in conjunction with either the `alt`,
`ctrl`, or `shift` modifier keys. This fixed an issue where the Cypress
shortcut handler would override the browser native keyboard shortcut for
search (`ctrl + f`). Fixed
[#20222](https://github.com/cypress-io/cypress/issues/20222).
- Updates were made to correctly escape dollar signs in the
`CYPRESS_DOWNLOAD_PATH_TEMPLATE` environment variable. Issues were seen
utilizing this template when the env was provided from a package manager file.
Fixed [#19914](https://github.com/cypress-io/cypress/issues/19914).
- Fix the `Cypress.Buffer` TypeScript type to reference the static constructor
of `Buffer`, instead of incorrectly referencing the `Buffer` instance which
caused Type errors. Fixes
[#20542](https://github.com/cypress-io/cypress/issues/20542).
**Dependency Updates:**
- Upgraded `electron` dependency from `15.3.4` to `15.3.5` to address the
[CVE-2022-21718](https://nvd.nist.gov/vuln/detail/CVE-2022-21718) NVD security
vulnerability. Addressed in
[#20750](https://github.com/cypress-io/cypress/issues/20750).
- Upgraded `minimist` dependency from `1.2.5` to `1.2.6`. Addressed in
[#20756](https://github.com/cypress-io/cypress/issues/20756).
- Upgraded `nanoid` dependency from `3.1.20` to `3.1.31` to address the
[CVE-2021-23566](https://nvd.nist.gov/vuln/detail/CVE-2021-23566) NVD security
vulnerability. Addressed in
[#20726](https://github.com/cypress-io/cypress/pull/20726).
- Upgraded `node-forge` dependency from `1.0.0` to `1.3.0` to address the
[CVE-2022-24771](https://nvd.nist.gov/vuln/detail/CVE-2022-24771) NVD security
vulnerability. Addressed in
[#20727](https://github.com/cypress-io/cypress/pull/20727).