CVE-2021-22929: Brave

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in tor.log.

Affected products

• Brave Brave: before 1.28.62 (fixed in 1.28.62)

Published 2021-08-31. Last modified 2026-06-17.