CVE-2025-47241
2 advisories.
PyPI/browser-use CVE-2025-47241: critical 9.3
Browser Use allows bypassing `allowed_domains` by putting a decoy domain in http auth username portion of a URL
Action: Upgrade browser-use to 0.1.45 or later.
pip install browser-use==0.1.45Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.45 | - |
Fixed versions
| 0.1.45 |
Sources
- osv: GHSA-x39x-9qw5-ghrf
- https://github.com/browser-use/browser-use/security/advisories/GHSA-x39x-9qw5-ghrf
- https://nvd.nist.gov/vuln/detail/CVE-2025-47241
- https://github.com/browser-use/browser-use/pull/1561
- https://github.com/browser-use/browser-use
- https://github.com/browser-use/browser-use/releases/tag/0.1.45
CVE-2025-47241 · published · modified · JSON
PyPI/browser-use CVE-2025-47241: critical 9.3
Browser Use allows bypassing `allowed_domains` by putting a decoy domain in http auth username portion of a URL
Action: Upgrade browser-use to 0.1.45 or later.
pip install browser-use==0.1.45Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.45 | - |
Fixed versions
| 0.1.45 |
Sources
- osv: PYSEC-2026-300
- https://github.com/browser-use/browser-use/security/advisories/GHSA-x39x-9qw5-ghrf
- https://nvd.nist.gov/vuln/detail/CVE-2025-47241
- https://github.com/browser-use/browser-use/pull/1561
- https://github.com/browser-use/browser-use
- https://github.com/browser-use/browser-use/releases/tag/0.1.45
- https://pypi.org/project/browser-use
- https://github.com/advisories/GHSA-x39x-9qw5-ghrf
CVE-2025-47241 · published · modified · JSON