https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:05:57.813761+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-5379 EUVD-2026-5379 2026-10-07T17:05:57.876593+00:00 EUVD-2026-5379 https://cve.radiocsirt.org/vuln/fkie_cve-2024-33669 fkie_cve-2024-33669 2026-10-07T17:05:57.876632+00:00

An issue was discovered in Passbolt Browser Extension before 4.6.2. It can send multiple requests to HaveIBeenPwned while a password is being typed, which results in an information leak. This allows an attacker capable of observing Passbolt's HTTPS queries to the Pwned Password API to more easily brute force passwords that are manually typed by the user.

 https://cve.radiocsirt.org/vuln/ghsa-xfq4-78j7-v594 GHSA-xfq4-78j7-v594 — Passbolt Browser Extension leaks password information 2026-10-07T17:05:57.876667+00:00

Affected: npm: passbolt-browser-extension

An issue was discovered in Passbolt Browser Extension before 4.6.2. It can send multiple requests to HaveIBeenPwned while a password is being typed, which results in an information leak. This allows an attacker capable of observing Passbolt's HTTPS queries to the Pwned Password API to more easily brute force passwords that are manually typed by the user.

 https://cve.radiocsirt.org/vuln/gsd-2024-33669 gsd-2024-33669 2026-10-07T17:05:57.876692+00:00 gsd-2024-33669