bruno
v4.3.0Opensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)
- Maintenance
- ActiveBased on the last push: commit history is not collected yet
- License
- MITPermissive · OSI-approved
- Security
- 5 advisories2 critical, 2 high, 1 medium
- Supported versions
- No scheduleendoflife.date does not track this project
48.4k stars · 3.1k forks · 2k open issues · last release 24 days ago · data checked 1 hour ago
Security advisories
All advisories on GitHubThe 5 most recent advisories published by the maintainers: 2 critical, 2 high, 1 medium. Check the patched version against the one you run.
- mediumGHSA-g747-7v24-2w4vAug 21, 2026OAuth2 state parameter is not validated on callback, allowing authorization code injection
- Affected
- <4.0.0
- Patched in
- 4.0.0
- criticalCVE-2026-34841Mar 31, 2026Axios npm Supply Chain Incident Impacting @usebruno/cli
- Affected
- <3.2.0
- Patched in
- 3.2.1
- criticalGHSA-246j-fv2m-6jhxNov 28, 2025SHA1-Hulud supply-chain compromise (transitive @postman/tunnel-agent) — Upgrade @usebruno/cli to 2.14.4
- Affected
- <=2.14.2
- Patched in
- 2.14.4
- highCVE-2025-30354Apr 1, 2025Safe-Mode ignored in Asserts expressions
- Affected
- <= 1.26.0
- Patched in
- 1.39.1
- highCVE-2025-30210Apr 1, 2025XSS On Environment Name
- Affected
- >= 1.38.0 < 1.39.1
- Patched in
- 1.39.1