74 matches found
avalagent (1.0.0), browser-use-undetected (>=0.2.5, <=0.2.5.3) +4 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.23)
langchain-openai PYPI version 0.3.23 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - avalagent 1.0.0 - browser-use-undetected =0.2.5, =0.2.10, =0.0.7, =3.2.1, =3.2.5 Source cves: CVE-2026-41488 Source advisory:...
actbench (0.0.1a5), blastai (>=0.1.2, <=0.1.6) +9 more potentially affected by CVE-2026-34070 via langchain-core (0.3.49)
langchain-core PYPI version 0.3.49 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - actbench 0.0.1a5 - blastai =0.1.2, =0.1.41, =0.1.13, =0.1.7, =3.0.0, =0.1.3, =0.1.7, =0.1.48, =0.1.43, =0.1.44 Source cves:...
browser-use (>=0.2.6, <=0.3.2), re-browser-use (0.3.2) potentially affected by CVE-2026-34070 via langchain-core (0.3.64)
langchain-core PYPI version 0.3.64 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - browser-use =0.2.6, =0.3.2 - re-browser-use 0.3.2 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...
browser-use (>=0.2.6, <=0.3.2), re-browser-use (0.3.2) potentially affected by CVE-2026-34070 via langchain-core (0.3.64)
langchain-core PYPI version 0.3.64 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - browser-use =0.2.6, =0.3.2 - re-browser-use 0.3.2 Source cves: CVE-2026-34070 Source advisory: OSV:GHSA-QH6H-P6C9-FF54...
browser-use-recorder (0.1.41), iatoolkit (>=0.3.1, <=1.59.0) +3 more potentially affected by CVE-2026-34070 via langchain-core (0.3.35)
langchain-core PYPI version 0.3.35 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - browser-use-recorder 0.1.41 - iatoolkit =0.3.1, =0.1.0, =25.3.4.1, =1.1.40, =1.1.41 Source cves: CVE-2026-34070 Source advisory:...
aiagents4pharma (>=0.0.0, <=1.49.1), aiagents4pharma-ansh (0.0.0) +51 more potentially affected by CVE-2026-28804 via pypdf (>=6.0.0, <=6.7.4)
pypdf PYPI version =6.0.0, =0.0.0, =1.0.0a3, =0.2.0, =0.2.0, =0.0.3, =6.2.61, =1.0.20, =0.12.0, =2.4.23, =1.4.0, =1.4.1 and more Source cves: CVE-2026-28804 Source advisory: OSV:GHSA-9M86-7PMV-2852...
Atomicity for Agents: Exposing, Exploiting, and Mitigating TOCTOU Vulnerabilities in Browser-Use Agents
Browser-use agents are widely used for everyday tasks. They enable automated interaction with web pages through structured DOM based interfaces or vision language models operating on page screenshots. However, web pages often change between planning and execution, causing agents to execute action...
aiagents4pharma (>=0.0.0, <=1.49.1), aiagents4pharma-ansh (0.0.0) +50 more potentially affected by CVE-2026-27024 via pypdf (>=6.0.0, <=6.7.0)
pypdf PYPI version =6.0.0, =0.0.0, =0.2.0, =0.2.0, =6.2.61, =1.0.20, =0.12.0, =2.4.23, =1.4.0, =1.4.1 and more Source cves: CVE-2026-27024 Source advisory: OSV:GHSA-996Q-PR4M-CVGQ...
browser-use (>=0.2.6, <=0.3.2), re-browser-use (0.3.2) potentially affected by CVE-2026-26013 via langchain-core (0.3.64)
langchain-core PYPI version 0.3.64 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - browser-use =0.2.6, =0.3.2 - re-browser-use 0.3.2 Source cves: CVE-2026-26013 Source advisory: OSV:GHSA-2G6R-C272-W58R...
actbench (0.0.1a5), blastai (>=0.1.2, <=0.1.6) +9 more potentially affected by CVE-2026-26013 via langchain-core (0.3.49)
langchain-core PYPI version 0.3.49 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - actbench 0.0.1a5 - blastai =0.1.2, =0.1.41, =0.1.13, =0.1.7, =3.0.0, =0.1.3, =0.1.7, =0.1.48, =0.1.43, =0.1.44 Source cves:...
EUVD-2025-13352
Malicious code in bioql PyPI...
actbench (0.0.1a5), ambientagi (>=0.1.1, <=0.2.12) +11 more potentially affected by unknown CVE via browser-use (>=0.1.19, <=0.2.2)
browser-use PYPI version =0.1.19, =0.1.1, =0.1.0, =0.1.13, =0.1.7, =0.1.3, =0.1.0, =0.1.15, =0.1.1, =0.1.1, =2.1.1, =0.1.0, =0.13.0, =0.14.1 Source cves: unknown CVE Source advisory: SNYK:PYTHON-BROWSERUSE-12304091...
Access Control Bypass
Overview browser-use is a Make websites accessible for AI agents Affected versions of this package are vulnerable to Access Control Bypass via the searchgoogle and gotourl functions, which fail to enforce domain restrictions by using direct page.goto calls instead of the validated...
VPI-Bench: Visual Prompt Injection Attacks for Computer-Use Agents
Computer-Use Agents CUAs with full system access enable powerful task automation but pose significant security and privacy risks due to their ability to manipulate files, access user data, and execute arbitrary commands. While prior work has focused on browser-based agents and HTML-level attacks,...
ambientagi (>=0.1.1, <=0.2.12), kolega-code (>=0.1.0, <=0.3.0) +7 more potentially affected by CVE-2025-47241 via browser-use (>=0.1.19, <=0.1.41)
browser-use PYPI version =0.1.19, =0.1.1, =0.1.0, =0.1.0, =0.1.15, =0.1.1, =0.1.1, =2.1.1, =0.1.0, =0.13.0, =0.14.1 Source cves: CVE-2025-47241 Source advisory: OSV:GHSA-X39X-9QW5-GHRF...
ambientagi (>=0.1.1, <=0.2.12), kolega-code (>=0.1.0, <=0.3.0) +7 more potentially affected by CVE-2025-47241 via browser-use (>=0.1.19, <=0.1.41)
browser-use PYPI version =0.1.19, =0.1.1, =0.1.0, =0.1.0, =0.1.15, =0.1.1, =0.1.1, =2.1.1, =0.1.0, =0.13.0, =0.14.1 Source cves: CVE-2025-47241 Source advisory: GHSA-X39X-9QW5-GHRF...
GHSA-X39X-9QW5-GHRF Browser Use allows bypassing `allowed_domains` by putting a decoy domain in http auth username portion of a URL
Summary During a manual source code review, ARIMLABS.AI researchers identified that the browseruse module includes an embedded whitelist functionality to restrict URLs that can be visited. This restriction is enforced during agent initialization. However, it was discovered that these measures can...
ambientagi (>=0.1.1, <=0.2.12), kolega-code (>=0.1.0, <=0.3.0) +7 more potentially affected by CVE-2025-47241 via browser-use (>=0.1.19, <=0.1.41)
browser-use PYPI version =0.1.19, =0.1.1, =0.1.0, =0.1.0, =0.1.15, =0.1.1, =0.1.1, =2.1.1, =0.1.0, =0.13.0, =0.14.1 Source cves: CVE-2025-47241 Source advisory: SNYK:PYTHON-BROWSERUSE-10118296...
Use of Non-Canonical URL Paths for Authorization Decisions
Overview browser-use is a Make websites accessible for AI agents Affected versions of this package are vulnerable to Use of Non-Canonical URL Paths for Authorization Decisions through the isurlallowed method, that responsible for checking alloweddomains list from BrowserContextConfig class . An...
