Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Usebruno

First CVE: Nov 4, 2024Active for: 2 yearsTotal CVEs: 4

Usebruno develops Bruno, an API client and testing tool positioned as a lightweight alternative to established development platforms, with a vulnerability footprint centered on supply-chain and client-side attack vectors. The recurring weakness classes—including unsafe code downloads, embedded malicious code, cross-site scripting, permissive cross-domain policies, and open redirects—reflect the inherent risks of a tool that integrates with external services, processes untrusted requests, and executes client-side logic. Current severity, exploitation status, and exposure counts are shown alongside this summary.

FAUCET AI Generated
4
Total CVEs
More Total CVEs than 79% of tracked vendors
1.3
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 75% of tracked vendors
6.7
Avg CVSS Score
Higher Avg CVSS Score than 44% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Usebruno over time

Volume of CVEsAvg CVSS Base Score
First CVE
Nov 4, 2024
20 months ago
Most Recent CVE
Apr 6, 2026
109 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (4 CVEs).

4 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2026-34841CRITICAL
Bruno is an open source IDE for exploring and testing APIs. Prior to 3.2.1, Bruno was affected by a supply chain attack involving compromised versions of the axios npm package, whi
Apr 6, 20269.833NONO
CVE-2025-30210MEDIUM
Bruno is an open source IDE for exploring and testing APIs. Prior to 1.39.1, the custom tool-tip components which internally use react-tooltip were setting the content (in this cas
Apr 1, 20256.119NONO
CVE-2024-48463MEDIUM
Bruno before 1.29.1 uses Electron shell.openExternal without validation (of http or https) for opening windows within the Markdown docs viewer.
Nov 4, 20246.519NONO
CVE-2025-30354MEDIUM
Bruno is an open source IDE for exploring and testing APIs. A bug in the assertion runtime caused assert expressions to run in Developer Mode, even if Safe Mode was selected. The b
Apr 1, 20254.316NONO
View all 4 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products4 CVEs
75%
25%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumCritical
Attack Vector
Local0 (0.0%)
Network4 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None1 (25.0%)
Unknown0 (0.0%)
Required3 (75.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None4 (100.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (4 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Usebruno.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Usebruno — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Usebruno's Products

View all 2 CNAs →

Top CWEs