All 4 CVE vulnerabilities found in bruno, with AI-generated Chinese analysis, references, and POCs.
Vendor: usebruno
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-85665 | Bruno through 4.1.0 Arbitrary File Read via Unconfined Body File Path CWE-22 | 6.5 | Medium | 2026-09-04 |
| CVE-2026-34841 | Axios npm Supply Chain Incident Impacting @usebruno/cli CWE-494 | 9.8 | Critical | 2026-04-06 |
| CVE-2025-30354 | Bruno ignores Safe-Mode in Asserts expressions CWE-942 | 9.8AI | Critical AI | 2025-04-01 |
| CVE-2025-30210 | Bruno XSS On Environment Name CWE-80 | 6.1AI | Medium AI | 2025-04-01 |
All 4 known CVE vulnerabilities affecting bruno with full Chinese analysis, references, and POCs where available.