Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I submitted a remote code execution to the browser-use about 40 days ago. GHSA-r2x7-6hq9-qp7v I am a bit stunned by the lack of response. Any safety concerns in this project?
 help



Hey! Where did you submit this exactly? Can you provide a link? Will ask others on the team also, but I am not sure what you are referring to.

reply


yes: https://github.com/browser-use/browser-use/security/advisori...

reply


404 for me

reply


Its 404 because its reported to them "privately" via the "Security and Privacy" tab. It has just been ignored by them.

reply


Is that correct? https://github.com/advisories/GHSA-r2x7-6hq9-qp7v returns a 404.

reply


it is https://github.com/browser-use/browser-use/security/advisori..., but it will also 404 until they make it public.

reply




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: