CRITICAL9.3PyPI
PYSEC-2026-300· CVE-2025-47241, GHSA-x39x-9qw5-ghrfBrowser Use allows bypassing `allowed_domains` by putting a decoy domain in http auth username portion of a URL
Modified: 7/13/2026
package
PyPI/browser-use
pkg:pypi/browser-use
CRITICAL9.3PyPI
GHSA-x39x-9qw5-ghrf· CVE-2025-47241, PYSEC-2026-300Browser Use allows bypassing `allowed_domains` by putting a decoy domain in http auth username portion of a URL
Modified: 6/29/2026