usebruno records
4 published records for vendor usebruno.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 75%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-494 Download of Code Without Integrity Check1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)1
- CWE-942 Permissive Cross-domain Security Policy with Untrusted Domains1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2026-34841No exploit | Axios npm Supply Chain Incident Impacting @usebruno/cliusebruno · bruno · CWE-494 | Critical9.8 | — | 0.3% | Apr 6, 2026 |
34Monitor | CVE-2025-30354No exploit | Bruno ignores Safe-Mode in Asserts expressionsusebruno · bruno · CWE-942 | High8.7 | — | 0.3% | Apr 1, 2025 |
34Monitor | CVE-2025-30210No exploit | Bruno XSS On Environment Nameusebruno · bruno · CWE-80 | High8.7 | — | 0.3% | Apr 1, 2025 |
26Monitor | CVE-2024-48463No exploit | Bruno before 1.29.1 uses Electron shell.openExternal without validation (of http or https) for opening windows within the Markdown docs viewusebruno · bruno · CWE-601 | Medium6.5 | — | 0.6% | Nov 4, 2024 |
- CVE-2026-3484139Monitor
Axios npm Supply Chain Incident Impacting @usebruno/cli
CriticalCVSS 9.8No exploitEPSS 0%usebruno · brunoApr 6, 2026
- CVE-2025-3035434Monitor
Bruno ignores Safe-Mode in Asserts expressions
HighCVSS 8.7No exploitEPSS 0%usebruno · brunoApr 1, 2025
- CVE-2025-3021034Monitor
Bruno XSS On Environment Name
HighCVSS 8.7No exploitEPSS 0%usebruno · brunoApr 1, 2025
- CVE-2024-4846326Monitor
Bruno before 1.29.1 uses Electron shell.openExternal without validation (of http or https) for opening windows within the Markdown docs view
MediumCVSS 6.5No exploitEPSS 0%usebruno · brunoNov 4, 2024