817 matches found
brave-browser
Brave 브라우저 이 저장소는 브라우저 빌드에 필요하지 않으며 이슈, 릴리스 및 위키만 보관합니다. 소스 코드와 기여는 https://github.com/brave/brave-core에서 확인할 수 있습니다. 최신 안정 버전을 받으려면 저희 웹사이트를 방문하세요. 리소스 이슈: Brave 브라우저의 버그 리포트 및 기능 요청. 릴리스: GitHub에서 호스팅되는 Brave 브라우저의 릴리스. 자세한 내용은 Brave 릴리스 일정을 참조하세요. 위키: 개발자, 관리자 및 고급 사용자를 위한 문서. 사용자 대상 문서는 Brave...
CVE-2026-59323
A flaw was found in Micrometer Tracing's Brave bridge when using W3C baggage propagation. A remote attacker can exploit this by sending specially crafted requests with excessively large baggage headers. This can lead to unbounded memory allocation, causing high CPU usage, increased garbage...
brave-browser v1.98.12
Brave Browser This repository is not needed for building the browser and only holds issues, releases and the wiki. The source code and contributions are at https://github.com/brave/brave-core. You can visit our website to get the latest stable release. Resources Issues: Bug reports and feature...
Brave Desktop 1.95.101 Security Fixes
Fixed wallet permission list being shown only after page refresh. Upgraded Chromium to 153.0.8010.37 — refer to Google Chrome advisories for inherited CVEs...
Brave Android 1.95.101 Security Fixes
Fix "brave://" URLs opening from external sources as reported on HackerOne by stoletheminerals. Upgraded Chromium to 153.0.8010.37 — refer to Google Chrome advisories for inherited CVEs...
Denial-Of-Service (DoS)
io.micrometer, micrometer-tracing-bridge-brave is vulnerable to a denial-of-service DoS. The vulnerability is due to improper handling of incoming baggage headers, which allows an attacker to send specially crafted or excessive baggage data that causes unbounded object allocation, potentially...
brave-browser v1.97.8
Brave Browser This repository is not needed for building the browser and only holds issues, releases and the wiki. The source code and contributions are at https://github.com/brave/brave-core. You can visit our website to get the latest stable release. Resources Issues: Bug reports and feature...
CVE-2026-81571
The Brave WordPress plugin before 0.8.8 does not prevent a URL parameter used to pre-fill a form field from being passed to WordPress's shortcode engine, allowing unauthenticated attackers to have arbitrary shortcodes registered on the site executed server-side...
EUVD-2026-70044
The Brave WordPress plugin before 0.8.8 does not prevent a URL parameter used to pre-fill a form field from being passed to WordPress's shortcode engine, allowing unauthenticated attackers to have arbitrary shortcodes registered on the site executed server-side...
CVE-2026-81571 Brave Popup Builder < 0.8.8 - Unauthenticated Arbitrary Shortcode Execution via UTM Parameter
The Brave WordPress plugin before 0.8.8 does not prevent a URL parameter used to pre-fill a form field from being passed to WordPress's shortcode engine, allowing unauthenticated attackers to have arbitrary shortcodes registered on the site executed server-side...
CVE-2026-81571
The Brave WordPress plugin versions prior to 0.8.8 fail to sanitize a URL parameter (UTM) used to pre-fill a form field before passing it to WordPress's shortcode engine . This allows unauthenticated attackers to trigger execution of any shortcode registered on the target site, resulting in serve...
CVE-2026-81571 Brave Popup Builder < 0.8.8 - Unauthenticated Arbitrary Shortcode Execution via UTM Parameter
The Brave WordPress plugin before 0.8.8 does not prevent a URL parameter used to pre-fill a form field from being passed to WordPress's shortcode engine, allowing unauthenticated attackers to have arbitrary shortcodes registered on the site executed server-side...
PT-2026-84747
The Brave WordPress plugin before 0.8.8 does not prevent a URL parameter used to pre-fill a form field from being passed to WordPress's shortcode engine, allowing unauthenticated attackers to have arbitrary shortcodes registered on the site executed server-side...
CVE-2026-81571: Improper Neutralization of Special Elements in Output Used by a Downstream Component
The Brave WordPress plugin before 0.8.8 does not prevent a URL parameter used to pre-fill a form field from being passed to WordPress's shortcode engine, allowing unauthenticated attackers to have arbitrary shortcodes registered on the site executed server-side...
WordPress Brave plugin < 0.8.6 - Unauthenticated Reflected XSS vulnerability
Unauthenticated Reflected XSS vulnerability discovered by Huseyin Mertoglu in WordPress Plugin Brave versions 0.8.6...
CVE-2026-47844
In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests. In order for this to happen, the server must be configured with Brave Tracing. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier...
CVE-2026-47844 Reactor Netty HTTP Server Leaks Exception Details
In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests. In order for this to happen, the server must be configured with Brave Tracing. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier...
CVE-2026-47844 Reactor Netty HTTP Server Leaks Exception Details
In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests. In order for this to happen, the server must be configured with Brave Tracing. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier...
CVE-2026-47844
In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests. In order for this to happen, the server must be configured with Brave Tracing. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier...
EUVD-2026-66679
In specific scenarios, the Reactor Netty HTTP Server may leak exception details across unrelated requests. In order for this to happen, the server must be configured with Brave Tracing. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier...