Skip to content
OpenAdvisories

Package · PyPI

browser-use

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 4.0
    CVE-2025-47241

    Browser Use allows bypassing `allowed_domains` by putting a decoy domain in http auth username portion of a URL

    In browser-use (aka Browser Use) before 0.1.45, URL parsing of allowed_domains is mishandled because userinfo can be placed in the authority component.

    browser-use browser-use browser-use PyPI