CVE-2023-33982: Briarproject Briar

Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days.

Bramble Handshake Protocol (BHP) in Briar before 1.5.3 is not forward secure: eavesdroppers can decrypt network traffic between two accounts if they later compromise both accounts. NOTE: the eavesdropping is typically impractical because BHP runs over an encrypted session that uses the Tor hidden service protocol.

Affected products

• Briarproject Briar: before 1.5.3 (fixed in 1.5.3)

Published 2023-05-24. Last modified 2026-06-17.