{"action":"Upgrade passbolt-browser-extension to 4.6.2 or later.","affected":[{"fixed":"4.6.2","introduced":"0"}],"component":"passbolt-browser-extension","cve_ids":["CVE-2024-33669"],"ecosystem":"npm","epss":0.00643,"exploited":false,"fixed_versions":["4.6.2"],"ghsa_id":"GHSA-xfq4-78j7-v594","id":"tcs_01M5KGHVQSYJ8R5SXPZB0AKZDS","modified_at":"2025-06-19T15:14:02.979189Z","published_at":"2024-04-26T03:30:29Z","references":["https://osv.dev/vulnerability/GHSA-xfq4-78j7-v594","https://nvd.nist.gov/vuln/detail/CVE-2024-33669","https://blog.quarkslab.com/passbolt-a-bold-use-of-haveibeenpwned.html","https://github.com/passbolt/passbolt_browser_extension","https://haveibeenpwned.com","https://www.passbolt.com","https://www.passbolt.com/incidents/pwned-password-service-information-leak","https://www.passbolt.com/security/more"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-xfq4-78j7-v594","url":"https://osv.dev/vulnerability/GHSA-xfq4-78j7-v594"}],"summary":"Passbolt Browser Extension leaks password information"}