BrowserOperator vulnerabilities
We track 1 vulnerability in BrowserOperator products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 28, 2026.
1vulnerabilities
0critical
1high
0exploited
7.3average CVSS score
Latest BrowserOperator vulnerabilities
- 7.3 High severity
browser-operator-core: Improper Limitation of a Pathname to a Restricted Directory
A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0. Affected is the function startsWith of the file scripts/component_server/server.js. Executing a manipulation of the argument request.url can lead to path traversal. The attack