Briarproject vulnerabilities
We track 2 vulnerabilities in Briarproject products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 24, 2023.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Briarproject vulnerabilities
- 7.4 High severity
Briar: Missing Authorization
The Introduction Client in Briar through 1.5.3 does not implement out-of-band verification for the public keys of introducees. An introducer can launch man-in-the-middle attacks against later private communication between two introduced parties.
- 7.5 High severity
Briar: Uncontrolled Resource Consumption
Bramble Synchronisation Protocol (BSP) in Briar before 1.4.22 allows attackers to cause a denial of service (repeated application crashes) via a series of long messages to a contact.