Skip to content
OpenAdvisories

Vendor

usebruno

4 known vulnerabilities.

Products

bruno 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-85665

    Bruno through 4.1.0 Arbitrary File Read via Unconfined Body File Path

    Bruno versions through 4.1.0 fail to validate file paths in request body declarations, allowing attackers to read arbitrary local files by using parent-directory traversal segments. When a collection is executed, attackers can craft a request with a body:file…

    usebruno bruno