Skip to content
OpenAdvisories

Package · npm

@usebruno/cli

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2026-34841

    Axios npm Supply Chain Incident Impacting @usebruno/cli

    Bruno is an open source IDE for exploring and testing APIs. Prior to 3.2.1, Bruno was affected by a supply chain attack involving compromised versions of the axios npm package, which introduced a hidden dependency deploying a cross-platform Remote Access Troj…

    usebruno bruno @usebruno/cli npm