Vendors / usebruno Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now usebruno records in CISA KEV No usebruno vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 64
Bruno versions through 4.1.0 fail to validate file paths in request body declarations, allowing attackers to read arbitrary local files by using parent-directory traversal segments.
CVSS 4.0 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00769 · Published 2026-09-04 · No fix listed CWE-22
Priority MEDIUM 62
Bruno before 1.29.1 uses Electron shell.openExternal without validation (of http or https) for opening windows within the Markdown docs viewer.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00679 · Published 2024-11-04 · No fix listed CWE-601
Priority MEDIUM 48
Bruno is an open source IDE for exploring and testing APIs.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00241 · Published 2026-04-06 · Fixed in 3.2.1 CWE-494
Priority LOW 38
Bruno is an open source IDE for exploring and testing APIs.
CVSS 4.0 HIGH 8.7· Local · No auth · User interaction · EPSS 0.00376 · Published 2025-04-01 · Fixed in 1.39.1 CWE-942
Priority LOW 38
Bruno is an open source IDE for exploring and testing APIs.
CVSS 4.0 HIGH 8.7· Local · No auth · User interaction · EPSS 0.00359 · Published 2025-04-01 · Fixed in 1.39.1 CWE-80
Open these records in search → All records by CVSS severity
1 3 1 0 0
