Description
In browser-use (aka Browser Use) before 0.1.45, URL parsing of allowed_domains is mishandled because userinfo can be placed in the authority component.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| browser-use | browser-use | < 0.1.45 | 0.1.45 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | browser-use | < 0.1.45 | 0.1.45 | GHSA-x39x-9qw5-ghrf |