Skip to content
OpenAdvisories

Vendor

usebruno

4 known vulnerabilities.

Products

bruno 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2025-30354

    Bruno ignores Safe-Mode in Asserts expressions

    Bruno is an open source IDE for exploring and testing APIs. A bug in the assertion runtime caused assert expressions to run in Developer Mode, even if Safe Mode was selected. The bug resulted in the sandbox settings to be ignored for the particular case where…

    usebruno bruno
  • High 8.7
    CVE-2025-30210

    Bruno XSS On Environment Name

    Bruno is an open source IDE for exploring and testing APIs. Prior to 1.39.1, the custom tool-tip components which internally use react-tooltip were setting the content (in this case the Environment name) as raw HTML which then gets injected into DOM on hover.…

    usebruno bruno