[mattaustin]

I submitted a remote code execution to the browser-use about 40 days ago. GHSA-r2x7-6hq9-qp7v I am a bit stunned by the lack of response. Any safety concerns in this project?

[LarsenCC]

Hey! Where did you submit this exactly? Can you provide a link? Will ask others on the team also, but I am not sure what you are referring to.

[mattaustin]

yes: https://github.com/browser-use/browser-use/security/advisori...

[hrimfaxi]

404 for me

[mattaustin]

Its 404 because its reported to them "privately" via the "Security and Privacy" tab. It has just been ignored by them.

[Chris2048]

Is that correct? https://github.com/advisories/GHSA-r2x7-6hq9-qp7v returns a 404.

[mattaustin]

it is https://github.com/browser-use/browser-use/security/advisori..., but it will also 404 until they make it public.