CVE-2024-48463: Usebruno Bruno

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Bruno before 1.29.1 uses Electron shell.openExternal without validation (of http or https) for opening windows within the Markdown docs viewer.

Affected products

• Usebruno Bruno: before 1.29.1 (fixed in 1.29.1)

Published 2024-11-04. Last modified 2026-06-17.