What are the main changes in Cypress v15.12.0?

This release adds a word wrap option in Studio, fixes intercept hangs during page navigation, patches two CVE vulnerabilities in dependencies, and resolves terminal display issues on exit.

Are there security fixes in Cypress v15.12.0?

Yes. Two dependency updates address CVE-2026-27699 (basic-ftp) and CVE-2026-25896 (fast-xml-parser). Upgrading is recommended.

How do I update Cypress to v15.12.0?

Run `npm install cypress@15.12.0` or `yarn add cypress@15.12.0` in your project.

Cypress v15.12.0 adds Studio word wrap, fixes intercept hangs on navigation, patches two CVE vulnerabilities, and resolves terminal cleanup issues.

Cypress v15.12.0 Update: Studio Word Wrap, Security Patches & Stability Fixes

Key Changes

Cypress v15.12.0, released on March 13, 2026, is a maintenance release focused on stability improvements, developer experience enhancements, and critical security patches. This version addresses real-world pain points reported by the testing community.

New Feature: Studio Word Wrap

The Studio panel now supports word wrap for displayed code. This quality-of-life improvement makes it easier to read long selectors, assertions, and command chains without horizontal scrolling — particularly useful when working with complex DOM structures or data-driven tests.

Security Patches

Two dependency updates address known CVE vulnerabilities:

basic-ftp upgraded to v5.2.0 — patches CVE-2026-27699
fast-xml-parser upgraded to v4.5.4 — patches CVE-2026-25896

If your CI/CD pipeline runs security audits, upgrading eliminates these vulnerability flags. For more on securing your test infrastructure, see our Cypress deep dive guide.

Stability Fixes

Several critical bugs have been resolved:

Intercept hang fix: Waiting on multiple cy.intercept() calls no longer hangs when the page navigates and triggers a stability change. This was a significant pain point for teams testing SPAs with complex routing.
Terminal cleanup on SIGINT: Sending Ctrl+C to exit Cypress no longer leaves raw characters in the terminal. The cleanup process works correctly now.
Develop mode exit: Closing the Electron window in develop mode now properly terminates the underlying gulp process.
Stderr tag leak: Internal tags on stderr streams no longer appear in the CLI output during component testing.

Impact for QA Teams

The intercept hang fix is the most impactful change for day-to-day testing. Teams using cy.intercept() heavily — especially for API stubbing during navigation flows — should upgrade to eliminate intermittent test freezes. The security patches make this update essential for teams with compliance requirements. Combined with the Studio improvement, this release represents a solid maintenance update. For teams getting started with Cypress, check our complete Cypress tutorial.