CVE-2025-47241
In browser-use (aka Browser Use) before 0.1.45, URL parsing of allowed_domains is mishandled because userinfo can be placed in the authority component.
- Update to 0.1.45
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for browser-use in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerability: 1
In browser-use (aka Browser Use) before 0.1.45, URL parsing of allowed_domains is mishandled because userinfo can be placed in the authority component.
Check your installed stack and versions against the current vulnerability feeds.