Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
usebruno records in CISA KEVNo usebruno vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 62
Bruno before 1.29.1 uses Electron shell.openExternal without validation (of http or https) for opening windows within the Markdown docs viewer.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00679 · Published 2024-11-04 · No fix listed CWE-601
Priority MEDIUM 48
Bruno is an open source IDE for exploring and testing APIs.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00241 · Published 2026-04-06 · Fixed in 3.2.1 CWE-494
Priority LOW 38
Bruno is an open source IDE for exploring and testing APIs.
CVSS 4.0HIGH 8.7· Local · No auth · User interaction · EPSS 0.00376 · Published 2025-04-01 · Fixed in 1.39.1 CWE-942
Priority LOW 38
Bruno is an open source IDE for exploring and testing APIs.
CVSS 4.0HIGH 8.7· Local · No auth · User interaction · EPSS 0.00359 · Published 2025-04-01 · Fixed in 1.39.1 CWE-80
Open these records in search →