{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"browsercmdhbt2","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":[],"id":"tcs_01M5KGPPS78MGVQBKFK7XYYYWY","modified_at":"2025-02-26T20:57:11Z","published_at":"2025-02-26T20:57:11Z","references":["https://osv.dev/vulnerability/PYSEC-2025-5","https://inspector.pypi.io/project/browsercmdhbt2/0.92/packages/7e/29/415779aabb5f53eee7911e62e564a5ddaaf98d01a404feecb5b733e8b861/browsercmdhbt2-0.92-py3-none-any.whl/browsercmd/main/google.py#line.15","https://inspector.pypi.io/project/browsercmdhbt2/0.92/packages/7e/29/415779aabb5f53eee7911e62e564a5ddaaf98d01a404feecb5b733e8b861/browsercmdhbt2-0.92-py3-none-any.whl/browsercmd/main/google.py#line.69"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2025-5","url":"https://osv.dev/vulnerability/PYSEC-2025-5"}],"summary":"Exfiltrates user cookies to hardcoded server endpoint during normal operations"}